According to the HITRUST CSF Assurance Program, the reliance period for a point-in-time assessment is one year (12 months) from the assessment report date.
The statement claims a two-year validity, which is incorrect.
Reliance beyond one year would require an updated assessment or interim assessment for assurance continuity.
Point-in-time reports can only be relied upon if issued within one year from the assessment start date; two years is not permitted.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit