GRC-250Governance, Risk & Compliance

HITRUST for HealthTech: Self-Assessment to Validated

HITRUST is often a customer requirement in healthcare. Move from self-assessment to validated, inheriting controls from your cloud provider along the way.

6 lessons About 3 hours 2 ALCs Certificate on completion

What you'll be able to do

  • Choose the right HITRUST assessment for your stage
  • Inherit controls from your cloud provider to save effort
  • Plan a self-assessment that prepares you for validation
  • Set a realistic path to a validated assessment
You finish with

A HITRUST readiness plan

What's in it. A HITRUST readiness plan with control inheritance from cloud providers and a self-assessment approach.

You build it lesson by lesson, using your own organization, and submit it for your certificate. It's yours to keep and adapt.

Who it's for

Security and compliance leads at HealthTech and health data companies.

What's inside

  1. Part 1Where the requirement comes from 18 min
  2. Part 2How small teams and enterprises meet it 17 min
  3. Part 3The method, step by step 20 min
  4. Part 4Hands-on lab: small team choose one 60 min
  5. Part 5Hands-on lab: enterprise choose one 120 min
  6. Part 6Finish and submit your deliverable 16 min

Built for your size

The requirement is the same everywhere. How you meet it depends on who you have. You pick the lab that matches your organization.

Small team or early-stageInherit everything you can.
EnterpriseR2 validated assessment programme.

How you earn the certificate

Submit your finished deliverable, which is scored against a published rubric, and pass a short scenario quiz. Your certificate goes to your wallet and can be checked by anyone on the public register.

Ready to build a HITRUST readiness plan?6 lessons, about 3 hours. Start whenever you're ready.
Join and enroll