What is HITRUST and SOC 2?

What is HITRUST and SOC 2?

HITRUST: HITRUST is an independent, not-for-profit organization that provides a comprehensive, certifiable framework to help organizations address the multitude of security, privacy and compliance requirements related to the protection of sensitive information. It is a widely adopted security framework that includes a set of security, privacy and compliance controls that can be tailored to the specific needs of an organization.

SOC 2: SOC 2 is an auditing process developed by the American Institute of Certified Public Accountants (AICPA) to provide assurance to organizations that their controls meet the requirements of the AICPA Trust Services Criteria. It is a widely adopted framework that provides organizations with a way to demonstrate their commitment to protecting the security, availability, processing integrity, confidentiality and privacy of their customers’ data. SOC 2 reports are typically issued by a third-party assurance provider.