Clark Schaefer


As a HITRUST Authorized External Assessor Organization, Clark Schaefer Consulting can provide readiness and validated assessment services for all HITRUST assessment types.

Our dedicated team of HITRUST Certified CSF Professionals (CCSFPs) and Certified HITRUST Quality Professionals (CHQPs) is here to guide you through every step of the HITRUST certification journey.  

The HITRUST Cybersecurity Framework (CSF) rationalizes relevant regulations and standards into a single overarching security and privacy framework. Because the HITRUST CSF is both risk- and compliance-based, organizations of varying risk profiles can customize the security and privacy control baselines through various factors, including organization type, size, systems, and compliance requirements.

We help organizations determine which assessment is right for them, then guide them through preparation and certification with the following services: 

  • Readiness Assessment: Clark Schaefer Consulting takes a structured approach to help clients ensure they’re prepared to meet the requirements of the HITRUST CSF. As a result of the readiness assessment, we identify gaps, provide remediation recommendations, and help define a timeline for certification. 

  • Remediation Assistance: If your organization requires assistance with developing specific action plans and executing remediation activities, our team can help. We have dedicated experts, separate from our validated assessment team, that can help remediate gaps – from updating policies and procedures to conducting tabletop testing, and much more. 

  • HITRUST Validated Assessment: As an Authorized External Assessor Organization, Clark Schaefer Consulting conducts the validated assessment, testing all in-scope requirements utilizing the HITRUST approved methodology. Once the validated assessment is complete, it goes through our QA process, and we submit it to HITRUST for their review. 

  • HITRUST QA and Report Issuance: The assessment goes through the HITRUST QA process, and we coordinate with HITRUST on any follow-up information needed throughout their process. Lastly, the final report is issued, and dependent on the results from the assessment scores, a Letter of Certification as well. 

Featured Insights