Sold by: HITRUST
Championing programs that safeguard sensitive information and manage risk for global organizations
3
Overview
HITRUST develops, maintains, and provides broad access to its widely adopted common information security risk and compliance management framework and related assessment and assurance methodologies.
Best Known For:
- Development of a certifiable framework that provides organizations with a comprehensive, flexible, and efficient approach to regulatory compliance and risk management
- Creating the HITRUST CSF framework, which integrates more than 60 authoritative sources and founded on ISO 27001
- An information security assurance program built upon the principles of integrity, transparency, accuracy, and consistency to ensure that report recipients can understand and rely on the results
- Creating a best-in-class Software as a Service (SaaS) information risk management platform for assessing and reporting information risk and compliance
- Working through Cloud Service Providers (CSPs) so that tenant organizations can easily share and inherit controls to satisfy information protection requirements
Highlights
- Framework Adoption (HITRUST CSF) - Maps to 60+ authoritative sources - Assesses against multiple standards, such as HIPAA, NIST Cybersecurity Framework, and more Manage Assessments (HITRUST MyCSF SaaS Platform) - Reduces assessment management costs - Data retained to easily perform multiple assessments QA/Certifications (HITRUST Assurance Program) - Deliver a high level of assurance to relying parties - Different levels of assurance depending on organizational needs
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
e1 | Minimum one-year term. Includes 5 users and 2 assessment objects. Features include retained assessment data, modeling by CSF version, interim assessment, full export capabilities, default scoring, assessment QA reservation system, HIPAA compliance and reporting pack, Results Distribution System, designated customer success manager, external inheritance, basic benchmarking, and basic reporting and analytics. | $22,000.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Cost/unit |
|---|---|
You will pay a subscription fee through your AWS bill. | $0.01 |
Add-on per contract | $0.01 |
Dimensions summary
This listing bills as a contract subscription through your AWS bill. The e1 plan is the base subscription, sold on a minimum one-year term. It includes 5 users and 2 assessment objects, plus tools for retained assessment data, scoring, reporting, and secure results sharing. If you need capacity or capabilities beyond what the base includes, you can purchase add-ons per contract. Pricing scales by adding these per-contract add-ons to your e1 subscription rather than moving between separate tiers.
Top-of-mind questions for buyers
An assessment object represents one assessment you build and manage in the platform. The base e1 subscription covers two of them, along with seats for five named users. If you need more objects or users, you add per-contract add-ons rather than switching plans.
The e1 subscription fee stays fixed for its one-year term. When you need capacity beyond five users or two assessment objects, you buy add-ons per contract. These add-ons are charged on top of the base subscription. Pricing grows by stacking add-ons, not by moving to a separate tier.
The e1 subscription includes retained assessment data, modeling by framework version, interim assessment, export, default scoring, a QA reservation system, a HIPAA compliance and reporting pack, secure results distribution, a designated success manager, external inheritance, and basic benchmarking plus reporting and analytics.
hitrustalliance.net+1
Helpful?
Vendor refund policy
All purchases are final upon completion. Customers are encouraged to review product details, licensing terms, and requirements before completing a transaction. Once a purchase is processed, the license and associated services are non-transferable and cannot be reversed or exchanged.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support Contact: support@hitrustalliance.net Support Phone: 877-406-6006 Support URL:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Veri FIDO is a passwordless authentication SaaS solution built on the FIDO2 standard. With cross-device passkeys, patented device intelligence, and real-time risk monitoring, it helps enterprises strengthen security while simplifying the user experience.
Startup organizations using AWS services to process and store protected health information are confronted with substantial compliance challenges. Fortunately, the combined Vanta + A-LIGN HITRUST e1 solution is the fastest way for companies to become certified and get continuous visibility into their standing. Demonstrating your commitment to safeguarding data and protected health information (PHI) has never been easier.
A-LIGN is an active participate in in the AWS Global Security & Compliance Acceleration (GSCA) Program.
The HITRUST Common Security Framework (CSF) was developed in collaboration with healthcare and information security professionals to provide a prescriptive framework to simplify security requirements. It is the most widely-adopted security framework in the U.S. healthcare industry. As a HITRUST Authorized External Assessor, BARR Advisory can conduct an assessment that produces a validated certification report.
HITRUST incorporates multiple security and privacy standards as well as regulatory requirements, under one holistic program. The various intersections between these information technology frameworks and health care regulations make implementing the program complex, especially for organizations without adequate dedicated resources for the effort.
Customer reviews
Jeff M.
Better than nothing
Reviewed on Dec 08, 2022
Review provided by G2
What do you like best about the product?
If you have not used or implemented a cybersecurity framework for your organization, this is a good baseline to start with.
What do you dislike about the product?
It's not a feature rich program with a lot of bells and whistles. It's fairly bare bones but it does what it is supposed to do.
What problems is the product solving and how is that benefiting you?
Most companies are in dire need of any type of cybersecurity framework guidance, and many don't realize it. This solution provides an organization with a comprehensive package that if followed and implemented will make any organization more cyber secure.