HITRUST utilizes a reservation system within the MyCSF platform, allowing Assessed Entities to schedule the start of Quality Assurance (QA) procedures for all HITRUST validated assessment types.
During the QA reservation process, the Assessed Entity must indicate the date that they plan to submit the assessment to HITRUST and, based on the planned submission date, select an available QA Block during which HITRUST will begin QA review procedures on the assessment. QA Blocks are one-week periods where HITRUST will begin QA procedures on the assessment. Reservation slots occur within QA Blocks, and each QA Block contains a set number of reservation slots. MyCSF displays the QA Blocks that are available to reserve.
HITRUST encourages Assessed Entities to make their reservations as early as possible to secure their requested date because the reservation system will allow reservations up to one year in advance.
HITRUST begins QA procedures on the submitted assessment during the QA Block period. Assessed Entities should typically expect to hear from HITRUST within seven to ten business days after the end of the QA Block. Failure to hear from HITRUST during the week of the scheduled QA Block does not indicate that QA has not started.
Key requirements for the QA reservation process:
13.1.1 All Assessed Entities must make a QA reservation to submit its HITRUST r2, i1 or e1 validated assessment. The Assessed Entity may book a QA reservation during the following phases of the assessment workflow: Answering Assessment, Performing Validation, Inputting CAPs and Signing Representation Letter, and Reviewing CAPs.
13.1.2 A validated assessment report credit is required to make a reservation.
13.1.3 Reservations may be made up to one year in advance of the current date.
13.1.4 Prior to booking a reservation, Assessed Entities must acknowledge the cancellation policy. The cancellation policy outlines the date by which the Assessed Entity can make a modification or cancel the reservation without incurring a fee.
13.1.5 The submission date of the assessment, which is the date the assessment must be submitted to HITRUST, must be entered into MyCSF as part of the reservation process. Assessed Entities should work with their External Assessors to plan their submission date. Failure to submit the assessment by the submission date will result in cancellation of the reservation and a change fee being billed to the Assessed Entity. A new reservation will need to be made in order to submit the assessment to HITRUST.