A HITRUST certification is issued for all e1, i1 and r2 validated assessments.

A validated assessment may or may not result in certification. Certification is granted only if the assessment meets HITRUST certification criteria, including required thresholds (e.g., ≥62.5% where applicable) and other program conditions. Thus, not all validated assessments receive certification.

“Certification is not automatic upon validation; only assessments meeting HITRUST certification criteria are eligible for certification.” [HITRUST CSF Assurance Program Overview, 0022]