Issued2024-08-21

HITRUST AI Risk Management Assessment

AssessmentVoluntary

Summary

Provides a 51-control assessment for evaluating organizational AI risk-management and governance processes, with mappings to NIST and ISO/IEC guidance and an insights report for benchmarking control maturity, identifying gaps, and planning improvements.

Healthcare Implications

Healthcare organizations, payers, and vendors can use the assessment as a lower-barrier starting point to evaluate AI governance, document risk-management outcomes, prioritize remediation, communicate risk posture to leadership and partners, and prepare for more formal assurance or certification.

Impact Level

Medium

Keywords

Safety & Risk; Transparency & Governance; Privacy & Data

Stakeholders

Providers & Health Systems; Payers & Purchasers; Developers & Vendors; Regulators & Government