8.2. External Inheritance

External Inheritance allows users to “inherit” assessment results that are shared by the same or different organizational entity. Access and use of external inheritance is subject to the following requirements and available functionality:

• The owner of the “inheriting” assessment must be from a Professional-level (or above) MyCSF subscriber account and the owner of the “inheritable” assessment must be from a Corporate or Premier-level MyCSF subscriber account.

• Assessments must be an r2, i1 or e1 Validated type of completed assessment and “published” to be inheritable.

• Inheritance requests require approval from the “inheritable” assessment owner (inheritance provider) prior to allowing access to the inherited control maturity scores and any associated assessment commentary.

• Inheritance requests can be fully (100%) or partially (<100%) weighted and/or from multiple “inheritable” assessments for the same requirement.

Note: For guidance on weighting inheritance requests, refer to Chapter 12.2: “Reliance on Assessment Results Using Control Inheritance” and Appendix A-12: “Inheritance FAQs & Examples” in the HITRUST Assessment Handbook. Users can use the interactive Inheritance Calculator on the MyCSF Help site to understand how inherited scores are calculated, and to simulate various weighted inheritance request scenarios.