What is HITRUST - The Health Information Trust Alliance?

HITRUST is a United States nonprofit that has established a common security framework (CSF) (in collaboration with healthcare, technology and information security leaders), which can be used by any organization that creates, accesses, stores or exchanges sensitive and/or regulated data.

The CSF includes a prescriptive set of controls seeking to blend the requirements of multiple regulations and standards, championing programs that “safeguard sensitive information and manage information risk for organizations across all industries and throughout the third-party supply chain.” HITRUST develops, provides and maintains broad access to its frequently adopted common risk and compliance management DNA de-identification frameworks, as well as related assessment and assurance methodologies and initiatives to advance cyber sharing, analysis and resilience. It also actively participates in government advocacy, community building and cybersecurity education efforts.