Security frameworks Guides | Governance Docs

HITRUST External Assessor: the only firms authorised to validate, vs Readiness Licensees, HITRUST's vetting and disclaimer, 8 questions…

HITRUST interim assessment: the year-one checkpoint of a 2-year r2, what it confirms, the evidence it needs, the…

MyCSF: HITRUST's platform for scoping, tailoring, evidence, inheritance of up to 85% of controls, assessor validation, QA and…

HITRUST vs SOC 2: prescribed, maturity-scored certification with central QA vs a CPA attestation on self-defined controls —…

HITRUST certification cost for e1, i1 and r2: HITRUST/MyCSF fees, External Assessor fees, remediation and staff time, the…

STAR Registry: ~2,765 CSA listings on 19 Sept 2026 — CAIQ, CAIQ Lite, Valid-AI-ted, Certification, Attestation, C-STAR, STAR…

CSA STAR certification cost by level: Level 1 free, Valid-AI-ted $595, Level 2 = ISO 27001 or SOC…

AI Controls Matrix v1.1 (22 June 2026): 247 objectives in 18 domains, 5 pillars, 5 roles, mappings to…

Valid-AI-ted: CSA's AI-scored STAR Level 1 — $595 for up to 10 attempts, free to members, feedback and…

STAR Level 1: the free CSA self-assessment behind ~2,479 of 2,765 registry listings, the CAIQ v4.1 submission version,…

CCPA penalties: $2,663 / $7,988 per violation, $107–$799 per consumer for breaches, $200/day Delete Act fines, no cure…

California Delete Act (SB 362): who is a data broker, the $6,000 registration, DROP's 45-day cycle since 1…

Category: Security frameworks