For an entity to retain its r2 certification for a two-year period, an interim assessment must be completed and submitted to HITRUST in the 90-day window leading up to the one-year anniversary of the certification issuance date.
A HITRUST bridge assessment allows an organization to maintain a form of HITRUST r2 certification status for an additional 90 days even if its r2 validated assessment recertification date has passed.
The assessment workflow for both HITRUST interim and bridge assessments (only applicable for r2 validated assessments) features a subset of the phases present in the workflow outlined above for HITRUST validated assessments.
The diagram below displays the workflow for interim and bridge assessments after each assessment has been submitted in MyCSF, including the primary owner of each phase. The descriptions of each phase, including requirements and responsibilities, are identical to those applicable phases described in Chapter 5.1 Validated Assessment Workflow.
For more information on interim and bridge assessment requirements, see Chapter 15.4 Interim Assessments and Chapter 15.8 Bridge Assessments.