🛡 HITRUST CSF

HITRUST CSF Assessment

AI-powered HITRUST CSF gap assessment — all 19 domains, maturity scoring and certification roadmap

Select Assessment Type
Choose the HITRUST assessment level appropriate for your organisation
HITRUST i1 Selected
e1
HITRUST e1
Essential Assessment
📅 1 year validity
Recommended for: Organisations beginning their HITRUST journey
i1
HITRUST i1
Implemented Assessment
📅 1 year validity
Recommended for: Organisations with mature security controls
r2
HITRUST r2
Risk-based Assessment
📅 2 year validity
Recommended for: Organisations seeking full certification
📊 Domain Maturity Scorecard
All 19 HITRUST CSF domains assessed — maturity scale 0–5
3 Critical Domains
Overall Maturity Score
3.12 / 5.0
Overall Progress toward i1 Certification
62.4% — In Progress — Target: 3.5+ for i1
# Domain Score Progress Gaps Status Priority Owner
🤖 AI HITRUST Gap Assessment
Upload security policies, procedures and evidence documents. AI assesses all 19 domains in 2 minutes.
📁
Drop security policies, procedures & evidence here
PDF, Word, Excel, CSV — information security policies, BCP, access control procedures, audit reports
Powered by AssurAI — results in ~2 minutes
🤖 AI Assessment Results
Overall Maturity
3.12
/ 5.0
i1 Readiness: In Progress
Domain Summary
Top Priority Gaps
DomainGapImpactRecommendation
Executive Summary

Timeline Estimate:
🗼 Certification Roadmap
Three-phase programme to HITRUST i1 certification
Phase 1 — Month 1–3
Gap Remediation
● In Progress
Fix all Critical gaps across the highest-risk domains. Establish baseline security programme and policy framework.
Configuration Management Third Party Assurance BC & Disaster Recovery
📅 Target: March 2027
35% complete
Phase 2 — Month 3–6
Policy & Control Enhancement
○ Upcoming
Address all High-priority gaps. Implement automated controls, enhance monitoring and strengthen vendor management programme.
Endpoint Protection Vulnerability Management Audit Logging & Monitoring
📅 Target: June 2027
Not started
Phase 3 — Month 6–9
Assessment Readiness
○ Upcoming
Complete i1 certification assessment readiness across all 19 domains. Engage HITRUST Authorised External Assessor and submit for validation.
All 19 Domains
📅 Target: September 2027
Not started
🎯 Target Certification
HITRUST i1 — Estimated: Q3 2027
📁 Assessment Evidence Tracker
Upload and track evidence required for each HITRUST CSF domain
6 / 19 Domains Evidenced
Domain Evidence Required Status Uploaded Last Updated Action