Readiness
Key activities
Phase 1
Review HITRUST Scope and Maturity Scale
Conduct meetings for reviewing control state
Document gaps and recommendations
Present readiness playbook
Remediation
Phase 2
Key activities
Prioritize, schedule and track activities
Develop missing policies and procedures
Design and implement missing controls
Validation
Phase 3
Key activities
Provide policy and evidence requests
Perform interviews
Validate control statements
Conduct ongoing status meetings to review and clarify evidence
Conduct internal QA
Submit corrective actions plans
Submit to HITRUST
Submission
Phase 4
Key activities
HITRUST performs QA
Respond to QA requests
Report issuance
Certification achieved
