HITRUST e1
The HITRUST e1 1-year Validated Assessment includes more efficiency and more flexibility into the series of certification options with HITRUST. Targeted at startups and low-risk or less complex organizations, e1 seeks to build a baseline level of cyber security. This e1 graded assessment focuses on 44 minimum security controls, which serve as a basic level. These controls can be enabled by organizations as a step towards more elaborate i1 or r2 certifications.
What is the HITRUST e1 Assessment?
The HITRUST e1 Assessment is a foundational 1-year validated assessment designed to demonstrate essential cybersecurity hygiene. It includes 44 key security requirements, providing a streamlined way for organizations to showcase a baseline level of cybersecurity maturity to third parties.
The assessment process involves:
- Self-assessment of the 44 requirements, with guidance from a HITRUST Authorized External Assessor as needed.
- Validation of submitted evidence by the External Assessor.
- HITRUST Quality Assurance (QA) review to determine certification eligibility.
Successful completion results in a HITRUST e1 Certification, signifying adherence to essential cybersecurity controls.
01
Establishes a Firm Ground
for Cybersecurity
Intertwines basic controls which have been sourced from HITRUST with other security frameworks and guidelines used by organizations.
02
Aligns with Regulatory Compliance
Aligns with key regulatory frameworks by incorporating essential cybersecurity controls derived from NIST CSF and industry best practices.
03
Improves the Level
of Effectiveness
Enables achieving the steps for i1 and r2 faster by making use of HITRUST evaluation results.
04
Fastest Way To Showcase Basic Level of Assurance
Demonstrates a basic level of cybersecurity assurance, offering a streamlined, 1-year validated certification with just 44 essential security requirements.
05
Defines the Assessment Process to be Followed
Involves them in assessing the information security systems in practice to make use of their findings.
Deciding Which HITRUST Certification is Right For You
To offer some explanation, we have prepared a summary of all the three assessments’ major components. If you have never encountered the term HITRUST, you can treat this step as an overview of your three further available options
ESSENTIALS 1-YEAR
-
An e1 is a baseline certification
-
44 fixed controls
-
Yearly certification
-
Assessment Complexity: Low
-
Small, non-complex environments
IMPLEMENTED 1-YEAR
-
An i1 is the stepping-stone certification
-
182 fixed controls
-
Annual re-certification
-
Assessment Complexity: Moderate
-
Moderate assurance needs
RISK BASED 2-YEARS
-
An r2 is a comprehensive risk-based certification
-
Up to 2,000+ (risk-based selection)
-
2 years (with interim assessment)
-
Assessment Complexity: High
-
Highly regulated industries & complex organizations
Recipients can either scan the code on a phone or tablet to access the form