Overview
The HITRUST scoping feature is used to set up an engagement with only the relevant Requirement Statements and requests. When you need to customize HITRUST Requirement Statements (Control Activities) for a specific engagement, such as HITRUST r2 Assessments, or for Interim Assessments and i1 Rapid Recertification, you can use the HITRUST import menu. This feature is designed to streamline the scoping process and make it more efficient.
Use the HITRUST scoping feature
When you create a new HITRUST engagement or roll forward a previously completed engagement, the scoping menu will appear.
The scoping menu will appear only on engagements that have been rolled forward or that have the Requirement Statements pre-populated from a template.
You'll be prompted to upload the in-scope Requirement Statements (Control Activities), which can be downloaded from MyCSF as a .csv file and directly uploaded into Fieldguide.
Once the Requirement Statements are uploaded:
Fieldguide will automatically remove the sheet rows and requests that are not relevant for the particular engagement based on the Unique ID.
Any Requirement Statements that are in scope but not part of the engagement template will be added.
Non-relevant controls will be unlinked.
If you need to access the HITRUST scoping menu later, go to your sheet's Utilities menu and then Import scoping requirements.
