Validated assessment

As explained in Data-Driven Cybersecurity

A validated assessment is an authorized evaluation performed according to an approved method to determine adherence to specified requirements.

A validated assessment is an authorized evaluation performed according to an approved method to determine adherence to specified requirements. In HITRUST, certification depends on reaching a required score. section 1.5.1

HITRUST evaluates adherence across controls and practices by rating:

• Policy: strategic direction and scope. section 1.5.1
• Procedure: step-by-step implementation instructions. section 1.5.1
• Implemented: actual execution of policies and procedures. section 1.5.1
• Measured and Managed: control effectiveness and continuing updates. section 1.5.1

Figure 1.2 HITRUST scoring criterion by percentage. The percentages indicate the weights placed on each category for scoring purposes.

Use the scoring criterion to see how percentage weights combine into each control statement’s overall assessment score. section 1.5.1

How Data-Driven Cybersecurity covers it

How deep it goes

Descends from framework requirements to weighted ratings of policy, procedure, implementation, measurement, and management.

Examples

Uses HITRUST’s 19 domains, illustrative procedures, control ratings, and percentage-based scoring criterion.

What you can do after

Evaluate adherence to prescribed controls and determine whether the required certification score has been achieved.

How it connects

Links HITRUST framework, cybersecurity controls, compliance, certification, and organizational risk profile.

liveBookmanning.com

Read Data-Driven Cybersecurity on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Data-Driven Cybersecurity. The section links point to the parts of the book it draws on.