By Fairuz Rafique
In the previous blog we discussed the process an organization must execute in order to prepare for and undergo their HITRUST CSF certification. This blog will focus on the HITRUST CSF interim assessment process. The interim assessment is required for all organizations that have successfully achieved their HITRUST CSF certification. As discussed in the previous blog in this series, an organization is required to complete their assessment process successfully without exhibiting any control gaps. However, acceptable weaknesses in control implementation is tolerated during the assessment process.