e1 Key Highlights
HITRUST e1 Facts
Provides entry-level assurance focused on the most critical cybersecurity controls to demonstrate that essential security hygiene is in place
43 (Year 1), 43 (Year 2), Implemented · Option for Rapid Recertification Year 2
Minimal
No tailoring
1x5: Implementation control maturity level
Low (for organizations that present a low level of information security risk)
Allows Carve-Outs or Inclusion
Yes, 1-year
Readiness
CISA Cyber Essentials, Health Industry Cybersecurity Practices (HICP) for Small Healthcare Organizations, NIST 171's Basic Requirements, NIST IR 7621
Yes
Yes · Prevents omissions and errors
HITRUST AI Cybersecurity
HITRUST AI Cybersecurity for AI ensures organizations mitigate cybersecurity threats, while also addressing privacy, ethics, and transparency risks.
HITRUST AI Risk Management
HITRUST AI Risk Management provides a strong foundation for assessing AI risks, identifying gaps, and drive continuous improvement.
HITRUST e1 Benefits
- Adds efficiency and flexibility to the HITRUST Portfolio
- Faster, more streamlined assurances
- Cyber threat-adaptive approach for added protection
- Efficient way to show that core cybersecurity controls are operating effectively to protect the organization
- Requires less effort to complete and falls below the level of assurance conveyed by the more rigorous HITRUST i1 and r2 Assessments
- Provides the right level of assurance for organizations that pose low levels of risk
