Solution Overview:

The HITRUST CSF is a comprehensive, flexible, and certifiable security framework of the in-scope AWS services (EC2, S3, RDS, Lambda, VPC, CloudWatch Logs, etc.) used by organizations across multiple industries to efficiently approach regulatory compliance and risk management.

By pulling from major pre-existing frameworks and working with organizations to better understand their needs, HITRUST provides a complete, certifiable security and privacy standard. This standard gives customers confidence that their data and confidential information is secure.

The HITRUST CSF unifies recognized standards and regulatory requirements from more than 10 governing bodies (NIST, HIPAA/HITECH, ISO, PCI DSS and more) making it one of the most robust security frameworks for organizations across any industry around the world. HITRUST CSF results in certification.

A-LIGN & Sela Cloud services:

Sela Cloud offers 360 degree cloud solution Coverage. This includes DevOps as a Service, Security Compliance and Risk Management, Cloud Migration and Cloud Architecture- thus ensuring that all cloud services are implemented with optimal performance. https://thinkwithwp.com/marketplace/seller-profile?id=seller-zpevtbtkbcsy6

Sela Cloud can provide a Well Architected Review for customers and provide recommendations for all AWS customers. https://thinkwithwp.com/marketplace/pp/prodview-r2kdiscr3h7ws?sr=0-1&ref_=beagle&applicationId=AWSMPContessa

A-LIGN offers advisory services for those preparing to complete a HITRUST certification or require remediation assistance. This includes policy and procedure development and non-technical implemenatation and remediation.

A-LIGN offers readiness assessments for those that have never completed a HITRUST certification before.

Coming soon! Diagnostic Assessment: a high-level report outlining the changes between v9.x and v11.x scoped specifically scoped for each client

Coming soon! i1 Rapid Recertification

A-LIGN offers gap assessments for those who want a detailed assessment on the delta control requirements between v9.x and v11.x.

Validated assessments plus certifications:

e1: Provides entry-level assurance focused on the most critical cybersecurity controls and demonstrates that essential cybersecurity hygiene is in place

i1: Provides a moderate level of assurance that addresses cybersecurity leading practices and a broader range of active cyber threats than the e1 assessment

r2: A high level of assurance that focuses on a comprehensive risk-based specification of controls with an expanded approach to risk management and compliance evaluation. The only flavor of HITRUST that provides targeted coverage for one or more additional authoritative sources (e.g. you can include controls from PCI, NIST, FEDRAMP etc)

For custom pricing and audit packaging or demo, please contact aws-marketplace@a-lign.com