Each validated assessment must include a documented External Assessor Time Sheet. The External Assessor team should work with the Assessed Entity during planning to determine the assessment fieldwork testing period and confirm the start date and end date of the fieldwork period.
13.6.1 The time reported within the timesheet must include all time spent on performance of the engagement by the External Assessor.
13.6.2 The time sheet must accurately reflect the start and end dates of the External Assessor’s fieldwork period.
- Fieldwork start date: The first day the External Assessor team starts reviewing the collected support data.
- Fieldwork end date: The date the External Assessor team completes its testing procedures and no new support data is received. *
*NOTE: The External Assessor may optionally perform its QA review and/or assessment wrap-up procedures within two weeks following the fieldwork end date. However, no new testing or evidence collection is permitted during this period.
13.6.3 The time sheet must include the names, roles, CCSFP number, and number of hours worked for each individual from the External Assessor organization who worked on the assessment.
13.6.4 Prior to completing the External Assessor Time Sheet, the Engagement Executive and QA Reviewer must be assigned on the assessment’s Name & Security page in MyCSF. The user making the assignments must select an individual holding a CCSFP certification for Engagement Executive and an individual holding a CHQP certification for QA Reviewer.
13.6.5 The External Assessor Time Sheet must be completed during the Performing Validation phase of the assessment workflow.
13.6.6 The External Assessor is required to have 50% of time incurred on the engagement performed by HITRUST CCSFPs.