Glossary
HITRUST CSF
A prescriptive security framework common in US healthcare.
HITRUST Common Security Framework is a prescriptive control set that maps to HIPAA, NIST, and ISO controls. HITRUST certification is a stronger security signal than SOC 2 alone; many health systems require it from vendors handling PHI.