HITRUST CSF

1. CSF framework

   Control framework harmonizing HIPAA, NIST, ISO and PCI.

2. Assessment types

   e1, i1 and r2 assessments and assurance levels.

3. Control maturity and scoring

   Policy, procedure, implemented, measured and managed maturity levels.

4. Certification process

   Validated assessment, QA review and two-year certification.

5. MyCSF

   Tool for scoping and evidencing assessments.

6. HIPAA mapping

   Mapping of CSF controls to HIPAA Security Rule.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.