How Can My Organization Utilize the HITRUST CSF Framework for a SOC 2 Report?

HITRUST and the American Institute of Certified Public Accountants (AICPA) have joined together to map HITRUST CSF controls to the Service Organization Controls (SOC) 2 Trust Principles and Criteria, specifically the Trust Services Principles of Security, Confidentiality and Availability. I.S. Partners, LLC, as both a CPA firm and a HITRUST CSF Assessor, can perform a SOC 2 audit leveraging the HITRUST CSF framework. If an organization requires both a SOC 2 and a HITRUST CSF Certification report, the two reports can be combined into a singular report.