HITRUST CSF® is a certifiable industry standard, achievable by any organization, big or small, for compliance with the standards and regulations of HIPAA, the HITECH Act, NIST 800-53, and many others. ecfirst, as a HITRUST® authorized CSF Assessor firm, is equipped to guide your organization through the journey of certification, beginning with a Self-Assessment and continuing on through Validation and Certification.
Complimentary HITRUST Executive Brief: Getting Started!
Fast-paced facts about HITRUST processes & timelines (29 min.)
Private HITRUST 1-Day CSF Strategy Workshop.
Ideal for CIO, CTO, ISO/CISO, Compliance, Legal, and IT Leadership
Complimentary seat(s) in an industry-leading program
Certified HIPAA Professional (CHP)
Certified Security Compliance Specialist™ (CSCS™)
Certified Cyber Security Architect℠ (CCSA℠)
Knowledge transfer throughout the HITRUST engagement
Easy and immediate access to the ecfirst Chief Executive to address any requirements
Unconditional guarantee of your complete satisfaction!
The HITRUST CSF is a flexible security framework that effectively and consistently simplifies the main processes of the compliance cycle—scoping, information collection, evaluation, reporting—while offering demonstrable efficiency and cost-containment.
HITRUST certification offers assurance to organizations and their partners and clients of the thoroughness, accuracy, consistency, and repeatability of their risk and compliance assessment activities. Only pre-qualified, HITRUST-certified professional service firms are authorized to assist in HITRUST validation and certification. Initially developed for use in the healthcare industry, the HITRUST CSF is now industry-agnostic and open for any organization to seek certification.
The MyCSF tool, available through HITRUST, makes it easier and more cost-effective for an organization to manage its information risk and comply with international, federal and state regulations regarding privacy and security. This tool provides organizations of all sizes with a secure, web-based solultion for performing risk assessments, corrective action plan management, and benchmarking.
The HITRUST Self-Assessment process enables an organization to establish a baseline of the current state of their policies, processes and controls – all of which are formally documented. ecfirst can assist your organization every step of the way as you go through this process and address HITRUST requirements. The Self-Assessment provides the foundation to identify key enhancements required to improve the organization’s security and overall compliance profile.
A validated assessment is conducted by ecfirst, a HITRUST Certified CSF Assessor. HITRUST utilizes the CSF Assurance methodology and the controls are scored accordingly. Assessments meeting or exceeding the current CSF Assurance scoring requirements for certification is indicated as CSF Certified on the validated report.
ecfirst is well-poised to support your efforts throughout the entire assessment process.
Learn about the HITRUST CSF from the compliance and cybersecurity experts at ecfirst. Schedule a complimentary Executive Brief (webinar) to walkthrough key elements of the HITRUST CSF. Understand the process for conducting a HITRUST self-assessment, learn about HITRUST validation, and the certification process. Knowledge transfer is at the core of all ecfirst client engagements. The journey to address the comprehensive HITRUST requirements can be challenging. We look forward to establishing ecfirst as your trusted partner within your enterprise.
“ecfirst is a great partner for P3 Health Partners as we work towards HITRUST certification. We started with an extremely tight time frame which required all involved to be focused and dedicated to our objective. ecfirst has been a dedicated partner and provided whatever resources were needed for us to accomplish our goals. Every person from ecfirst has been professional and knowledgeable. They have continuously gone up and beyond expectations and truly been a partner that cares about their clients. I look forward to our continued partnership because I know they have our best interest in mind.”
Devery Goodey
VP, Information Systems
P3 Health Partners
“ I just wanted to take a moment and say thank you. Thank you and the excellent team at ecfirst for hard work, late hours, and diligence during the first round of our HITRUST certification, and now working on our annual risk management and HIPAA compliance assessment.”
“ We at BRG are always looking to improve and enhance our compliance and cybersecurity posture. This is an area of executive and strategic priority for our organization to secure confidential client information. From HIPAA compliance, cybersecurity pen tests, to the HITRUST certification engagement, we have found ecfirst to be an exceptional partner that labored incredibly hard for us, with us. The ecfirst insight and diligence to ensuring HITRUST certification mandates are met led to us completing our engagement on budget and time. We look forward to deeper collaboration with ecfirst in the cybersecurity space in the future. I know you are personally committed and engaged to ensure BRG success with each engagement. I continue to recommend ecfirst highly and often! ”
Chip Goodman | Vice President of Information Technology
Berkeley Research Group, LLC
“ I have 20+ years of experience in the Healthcare IT industry in a variety of roles including Cybersecurity software and services. During this time, I have seen numerous speakers on the topic of Cybersecurity and Ali Pabrai is among the best.”
“ He covers the state of the industry, healthcare-specific regulations, process, product, best practices and call- to-action takeaways in a manner that can be understood at multiple levels including technical, clinical, supply chain, and executive.”
“Ali also weaves in stories and humor to keep the audience engaged on what can be a dry yet frightening topic. I highly recommend Ali Pabrai as a speaker, trainer and consultant in this area.”
Chris Liburdi | Director – Business Development
Srcg Ops – Business Technology
“ Provant Health partnered with ecfirst to build a plan and assist in executing it with the goal of achieving HITRUST certification.”
“ Ali Pabrai and his team were flexible, collaborative, and most importantly patient as we worked to educate our management team and key employees on the meaning and value of HITRUST. Due to many internal corporate changes, the first phase of the project took much longer than planned but ecfirst stayed with us the whole way. They pushed our team when needed but also stepped back and gave us room at times.”
“ I’d recommend ecfirst to any company who wants to understand HITRUST or work on assessing and remediating their processes and systems in preparation for certification.”
Tom Basiliere,
Chief Information Officer
Provant Health
“The course is very informative. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Amanda Geers
Hoag Hospital
“Better understanding of HITRUST connection between Policies, Procedures and Evidence. Overall rating of the Course: 9. Overall rating of the Instructor: 9.”
Ronnie Beekee
Hoag Hospital
“Good Information. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
James Ablan Go
Hoag Hospital
“Good overview of security to achieve HITRUST maturity. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Waleed Bassyoni
Hoag Hospital
“Very well-structed and helped me to understand easily. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Dara Huston
DMN Tech
“Broad real-world experience, not just technical overlay. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Christina Whitlock
H3 Strategies
“Clearly outlined the HITRUST compliance program, and the importance of scoping. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Dhara Shah
Student
“The workshop helped me to understand technical aspects clearly. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Shahram Ghobadi
“The workshop explained me the value of HITRUST. The course solidified my desire to obtain this certification. Overall rating of the Course: 9. Overall rating of the Instructor: 10.”
Ken Mickelson
Printer Logic
“The topics helps us to become HITRUST professional. I have gone through the CHP and CSCSTM. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Chris Bosque
Printer Logic
“Before coming to the course, I knew little. But at the end of the course, I just nailed it than I thought. Showed the process and what to expect with HITRUST. Overall rating of the Course: 10. Overall rating of the Instructor: 10.”
Soh Beela
Printer Logic
“The strength of the program was the discussion on the management framework, and process flow. Overall rating workshop: 10. Overall rating of instructor: 10. Excellent presentation! I have a much better understanding of HITRUST and its requirements. Chalice and Deb were very knowledgeable and communicated the subject matter well.”
“Overall rating workshop: 10. Overall rating of instructor: 10. Very good presentation.”
“Strength of the program was the interaction.”
“The overview of the CSF framework and MyCSF was the strength of the course. Overall rating workshop: 10. Overall rating of instructor: 10.”
“Strength of the program was the foundation provided for future direction for compliance and cyber security.”
I like how the instructor reviewed content at a higher level rather than all the details at this point. The workshop was entertaining as well as conversational; and focused on our specific organization. Overall rating workshop: 10. Overall rating of instructor: 10.”
Interactivity was a strength of the program.”
“Knowledge of the instructor was a strength of the program. I look forward to working with the ecfirst Team in the future. Overall rating workshop: 10. Overall rating of instructor: 10.”
“The overall complexity of HITRUST was covered well in the program.”
“Great HITRUST training. The instructor knowledge of HITRUST and how to implement it in our organization. Overall rating workshop: 10. Overall rating of instructor: 10.”
“The HITRUST course was brief and informative. Overall rating workshop: 10. Overall rating of instructor: 10.”
“The high-level insight was a strength of the HITRUST workshop. Overall rating workshop: 10. Overall rating of instructor: 10.”
“Having multiple instructors helped a lot. The open question format was terrific. Overall rating workshop: 9. Overall rating of instructor: 10.”
“Knowledge based, fast paced, easy to follow. Very informative course!!!”
“The practical aspect of the workshop was important.”
“The overview of HITRUST was well done.”
“Great overview of HITRUST and good introduction to MyCSF. Overall rating workshop: 10. Overall rating of instructor: 10.”
“Fun, good presenters, good presentation material.”
“Great information! Easy to understand. The pace and content were good! I hope other health systems pursue HITRUST certification. Overall rating workshop: 10. Overall rating of instructor: 10. The three-instructor tag team worked!”
“Overall rating workshop: 10. Overall rating of instructor: 10. Very descriptive program that covered well what HITRUST entails.”
Private, Onsite Workshop at a large Health System, June 2017
--------------------------------------------------
Trusted by the industry with proven methodology and results
Years of experience
People trained & certified
by ecfirst
Satisfied Customers