During HITRUST's QA phase of a Validated Assessment, HITRUST picks a sample of Control Objectives to review the assessor's validation and testing procedures.
HITRUST conducts a QA review of every validated assessment to confirm that assessors followed the methodology and applied consistent testing. QA does not re-test every control; instead, HITRUST selects a sample of Control Objectives across the assessment. For each sample, HITRUST reviews assessor notes, evidence, and testing procedures to ensure accuracy and completeness. This sampling approach balances efficiency with assurance, allowing HITRUST to evaluate the assessor’s work without duplicating the entire validation process. If issues are found, QA may expand its review or return the assessment for clarification. This process ensures that validated assessments meet HITRUST’s quality standards before reports or certifications are issued.
[References: HITRUST Assurance Program – “QA Review Procedures”; CCSFP Practitioner Guide – “QA Sampling of Control Objectives.”, ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit