The Library Retention feature provides visibility into specific changes associated with HITRUST CSF version updates, and allows users to apply those changes to assessment objects created under previous versions of the framework.
To begin the update process, open an assessment object in MyCSF:
Select the “Name & Security” section, or any line item in the “Admin & Scoping” section:
An upgrade prompt will be displayed if a new CSF version is available. The user may choose to retain the current CSF version, upgrade to the newest version, or cancel the update.
When the Upgrade option is selected the user will be prompted to confirm the decision.
A modal dialog box is displayed noting the key differences between the current CSF version and the updated CSF version. A detailed comparison report can be downloaded before deciding to apply changes by selecting the “Download Detailed Comparison Report” option. Note the request can still be cancelled at this screen.
The comparison report has two tabs. The first tab “Summary” displays “Assessment” changes that reconcile to the modal dialog box. Changes to the “Library” are also shown in the summary tab.
The second tab “Differences” shows additional details associated with the areas that changed in the CSF version.
“Apply Changes” is selected when the user is comfortable applying the CSF framework changes.
A final confirmation will be displayed to either continue or cancel the changes.
When the update is complete, the “CSF Version” field in the “Assessment Options” section of the assessment object will be updated to reflect the CSF version.