EP 151: Trust, But Verify: How HITRUST is Reshaping Assurance

About this episode

John Verry and Chris Schaeffer discuss the HITRUST framework and its impact on cybersecurity.

In this episode of the Virtual CISO Podcast, host John Verry and guest Chris Schaeffer discuss the HITRUST framework, its evolution, and its significance in the cybersecurity landscape. They delve into the Common Security Framework (CSF), the different assessment models (E1, I1, R2), and how HITRUST compares to other frameworks like SOC 2 and ISO 27001. The conversation also touches on the future of HITRUST, including potential reciprocity with other standards and the impact of emerging technologies like AI.

People in this episode

Host: John Verry

Guest: Chris Schaeffer

Topics covered

• HITRUST framework
• cybersecurity
• assessment models
• Common Security Framework
• emerging technologies
• reciprocity with standards

Keywords

• HITRUST
• cybersecurity
• assessment models
• SOC 2
• ISO 27001
• Common Security Framework
• AI
• reciprocity

Mentioned in this episode

Organizations: HITRUST, SOC 2, ISO 27001, Common Security Framework, AI

More episodes of The Virtual CISO Podcast

• Episode 159: The New Security Stack: Doors, Data, and AI With Jeffrey Friedman · June 10, 2026 · 41 min
• Episode 158: AI Is Increasing Your Cyber Risk – Can It Also Reduce It? With Mike Armistead · April 28, 2026 · 45 min
• Episode 157: AI Security: Testing, Exploits, and Threat Feeds With Marco Figueroa · April 3, 2026 · 50 min
• Episode 156: AI Security: Threat Modeling & Pipeline Evolution with Jason Rebholz · February 25, 2026 · 49 min
• Episode 155: Incident Response Testing in Cloud Forward Organizations with Matt Lea · December 17, 2025 · 30 min
• Ep 154: How DORA Will Impact US Companies with Dejan Kosutic · November 6, 2025 · 34 min