During an interim assessment for r2 certifications, only asubset of Requirement Statementsis retested. This sample is not determined manually by assessors or clients but issystematically generated by MyCSF. The tool ensures randomness and fairness while including mandatory items such as:
Requirement Statements with open gapsfrom the prior validated assessment.
Requirement Statements with active Corrective Action Plans (CAPs).
A random selection of additional requirements to confirm continued control performance.
This approach balances efficiency and assurance. It ensures that areas of previously identified weakness are re-examined while still sampling across the broader control set. By automating sample selection, HITRUST prevents bias and ensures consistency across interim reviews.
[References:HITRUST Interim Assessment Guide – “Sample Selection for Interims”; CCSFP Practitioner Guide – “Interim Testing and MyCSF Sampling Process.”, ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit