What is the HITRUST Assessment SaaS called?
MyCSF
Which HITRUST CSF source, enacted in 1996, aims to protect American medical records?
HIPAA
What feature in MyCSF allows results from one assessment to be used in another?
Inheritance
What does CAP stand for in HITRUST terminology?
Corrective Action Plan
What does HAX stand for?
HITRUST Assessment Xchange
What is the name of the HITRUST framework for risk management and regulatory compliance?
HITRUST CSF
ISO 27001
What is the report functionality called that provides a comprehensive view of an assessment’s scores based on an authoritative source?
Insights Reporting
How can an organization book a QA timeslot?
With a Reservation
What does RDS stand for?
Results Distribution System
Which HITRUST product enables the sharing of assessments?
RDS
How many categories are in the HITRUST CSF?
14
What is the highest tier of subscription available in MyCSF?
Premier
What is the name of an assessment submitted for review by an assessor and HITRUST?
Validated
What is the name of the assessment in HAX that calculates a vendor’s risk?
IRQ
What product is used from HITRUST for managing third-party risk?
HAX
In what year was the HITRUST CSF established?
2007
Which assessment type is built on controls linked to specific sources rather than HITRUST tailoring?
Targeted Assessment
Which assessment type includes tailoring?
R2
What must be generated in RDS and provided to an assessed entity to complete a share?
Token
What offers a catalog of software and consulting services for HITRUST compliance?
Product and Services Directory
Which major privacy law in the HITRUST CSF is based on European privacy standards?
GDPR
What is the name of the Excel spreadsheet that can be loaded into an assessment?
Offline Assessment
What document must be completed on the assessed entity’s letterhead?
Representation Letter
What HITRUST document inspired the workflows for HAX?
Third Party Risk Management Methodology