For an r2 Certification:

Certification is valid for two years, but an Interim Assessment must be performed at the 12-month mark to maintain certification status.

This ensures continuous compliance, validation of CAP progress, and confirmation of no significant scope changes.

Extract Reference (HITRUST Assurance Program, CCSFP Guide [0023]):

Interim Assessments are required 12 months after r2 certification to maintain certification validity for the second year.