HITRUST
CCSFP
Q1:
The Subscribers Comments field should be populated with the rationale for any requirement statement marked not-applicable (N/A).
○
A
True○
B
False
HITRUST
CCSFP
Q2:
For an r2 assessment, what is the minimum number of days an organization should wait before a new or updated Policy and/or Procedure can be reconsidered for testing?
○
A
Immediately○
B
30 Days○
C
60 Days○
D
90 Days
HITRUST
CCSFP
Q3:
How many domains are there in an assessment?
○
A
19○
B
10○
C
20○
D
15
HITRUST
CCSFP
Q4:
Which of the following are appropriate types of inheritance within MyCSF? (Select all that apply) [0061]
☐
A
Cross Organizational☐
B
Bi-lateral☐
C
Internal☐
D
External
HITRUST
CCSFP
Q5:
If most of the evaluative elements associated with a requirement statement do not apply to an assessed entity's control environment, the requirement statement can be marked "N/A".
○
A
True○
B
False