Skip to main content
Certifications & Audits

HITRUST CSF

A certifiable security framework that maps HIPAA and other standards into one control set.

The HITRUST CSF (Common Security Framework) is a certifiable framework that consolidates HIPAA, ISO 27001, NIST, and other standards into a single, prescriptive set of controls.

Because HIPAA itself offers no official certification, many healthcare organizations treat HITRUST certification as the closest thing to a recognized, third-party attestation of HIPAA-aligned security. Achieving it is significantly more involved than a SOC 2 report.

Stay current on HIPAA hosting

Practical guidance on compliance, hosting and the rules that actually apply to your practice.

Email me occasional updates about HIPAA hosting and compliance. No more than a few times a month, and you can unsubscribe at any time.