Support for Audits and Regulatory Investigations
The HITRUST Regulatory Assistance Center was created to provide guidance to organizations that have a HITRUST CSF® Certification and are preparing for or undergoing a regulatory audit. This includes providing guidance on how a HITRUST CSF Assessment Report can and should be leveraged to demonstrate compliance, including how specific requirements are met or what information to provide relating to a specific inquiry. The intent is to be a resource to aid organizations in understanding how to leverage their HITRUST CSF Certification report appropriately and effectively in responding to regulatory audits and other similar requests.
The Center is staffed with security and privacy professionals, attorneys, and other experts familiar with the HITRUST CSF, HITRUST Assurance Program, and HIPAA regulations. Organizations with a current HITRUST CSF Certification can reach the HITRUST Regulatory Assistance Center by completing the form.
While HITRUST helps organizations comply with requirements from more than 40 authoritative sources — including federal and state regulations, standards, and frameworks — the new Regulatory Assistance Center is currently equipped to offer support for HIPAA audits and regulatory investigations. More regulations will be added soon.
Engage with the HITRUST Regulatory Assistance Center
Use of the HITRUST Regulatory Assistance Center is subject to the following terms and conditions. By using this form, you agree to these terms and conditions and acknowledge reading them.
Communication of information by, in, to or through the HITRUST Regulatory Assistance Center and your use of it does not create or constitute an attorney-client relationship. Please do not send HITRUST any confidential or sensitive information through this form. Once your request is accepted by the HITRUST Regulatory Assistance Center, instructions on how to send information securely will be provided. By completing the form for the HITRUST Regulatory Assistance Center, you agree to be contacted to discuss next steps for your specific situation. This contact may be through HITRUST or a legal representative of HITRUST and any necessary disclosures, confidentiality agreements or releases will be handled at that time.