HITRUST unveils certification for using NIST cyber framework, with implications for all sectors

The Health Information Trust Alliance, or HITRUST, is unveiling its certification program for use of the National Institute of Standards and Technology's cybersecurity framework, a prelude to release -- possibly later this year -- of HITRUST's revised risk-management framework intended for use by all industry sectors.

The HITRUST certification effort builds on the group's “assurance” and “scorecard” programs which are intended to offer organizations “an effective and efficient means of assuring management, business partners, and regulators their compliance” with the...