Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
HITRUST CCSFP Exam - Topic 3 Question 21 Discussion
Actual exam question for
HITRUST's
CCSFP exam
Question #: 21
Topic #: 3
[All CCSFP Questions]
Topic #: 3
When an implementation gap is remediated, what is the minimum number of days the control must operate before retesting? [0130]
Suggested Answer:
C
For Implemented domain remediations, HITRUST requires 60 days of operation before retesting.
This ensures the control is not only deployed, but also functioning effectively over time.
A 30-day threshold applies to Policy/Process, while Implemented requires longer to validate consistent application.
Extract Reference (HITRUST CSF Scoring & CAP Guidance [0130]):
Implementation gaps must show at least 60 days of operating effectiveness before retesting can validate remediation.
Currently there are no comments in this discussion, be the first to comment!