Overview
Exporting an engagement binder downloads all of an engagement's sheets and documents to a ZIP file. HITRUST engagements offer an additional export option besides the standard export format.
For HITRUST engagements, you'll need to select a format for your engagement binder export:
Standard binder: Exports the standard engagement binder format.
Offline template: Exports in a format designed for uploading to MyCSF.
Export a HITRUST offline template
The offline template export option for HITRUST is designed to provide data used to populate the Offline Assessment sheet exported from a MyCSF assessment. This feature will assist in populating the sheet, but is not designed to replace the Offline Assessment sheet. This export also allows easier uploading of linked documents to MyCSF in bulk.
The option for the offline template export is only available for engagements that have a sheet using the HITRUST framework. This sheet must use the unique requirement statement ID as the sheet row key.
Requirements for offline template export
The following 6 columns are required for the HITRUST binder export to work properly without error:
These 3 columns should be set up as a Document Reference column type:
Policy Related Documents
Procedure Related Documents
Implemented Related Documents
These 3 columns should be set up as a Number column with Percent format. Values in these column cells should only be 100% (1), 75% (.75), 50% (.5), 25% (.25), or 0% (0).
Policy Score
Procedure Score
Implemented Score
Other requirements:
The HITRUST export will not run if the engagement includes any other columns with these names that don't have the correct column type.
If a value in the Score columns is anything other than the 5 values listed above, then the export will still run but there will be an error message in the exported sheet indicating the value did not match. These 5 values are the required values for the offline assessment sheet in alignment with the HITRUST scoring methodology.
Offline template ZIP file format
The exported zip file for the HITRUST offline template export has two main differences compared to a standard binder export:
In the offline template export, the Offline Assessment sheet data is included in a separate Excel spreadsheet named after the engagement. This spreadsheet contains three tabs:
The first tab includes the scoring formatted to match the required offline assessment formatting and mapped to each requirement statement.
The second tab includes a unique list of documents from the Document Reference columns mapped to each requirement statement. This tab can be updated if you need to indicate any documents are provided by the client by updating the Document Type column to state “Subscriber Document”. Third-Party Reports can also be identified by updating column E to “Yes”.
The third tab includes a mapping of all documents from the Document Reference columns to the applicable requirement statements and maturity levels.
In the offline template export, there is a folder that contains a flat list of all documents from the engagement. This removes the folder structure from Fieldguide and makes it easier to drag and drop all of the applicable documents into MyCSF. Ensure you remove any documents that you do not want to upload first, (such as an engagement letter, review notes, internal memos, support provided but not used, etc.), since this folder contains every document from the Documents tab of the engagement in Fieldguide.
FAQs
What phase does the Assessment Object need to be in for the scores and comments to update when using the offline assessment?
The Assessment Object needs to have the Pre-Assessment Approved and the Scoping fields accepted by the External Assessor. You will then be able to access the Offline Template Excel file to download it, populate it with your Fieldguide data, and re-upload it.
Can you override Requirement Statement Maturity Score using the offline assessment?
Yes, Maturity Scores can be updated when the offline assessment is uploaded into MyCSF. Set the External Assessor Evaluation columns to External Assessor Agrees to prevent the need to workflow the assessment back to your client after the offline assessment is uploaded.
Can you override the External Assessor comments in MyCSF?
Yes, current comments will be exported under the column External Assessor - General Comments, and if they are changed, then they will be overwritten in MyCSF.
Can you override the Client Subscriber comments?
Yes, current Client Subscriber comments will be exported under the Maturity Comments column, and if they are changed, then they will be overwritten in MyCSF.
How long does it typically take after uploading the offline assessment to see the changes in MyCSF?
MyCSF will not show any progress bar after uploading. Typically, it should take 30-60 seconds to parse the Excel file and complete the upload. Once this is complete, refresh your browser, and you will start to see the updates reflected with the new scores, comments, and document linking in each requirement statement.