HITRUST Launches New AI Security Assessment Tools
The framework update introduces new certifications and automation services to address rising AI and third-party risks.
Updated on Oct. 28, 2026 in Cybersecurity
Live Poll
Do you trust that automated security tools are sufficient to protect data from modern AI threats?
HITRUST has released an AI Security Assessment and Certification alongside new third-party risk management services. These updates provide organizations with tools to secure emerging technologies while streamlining compliance workflows.
Why it matters
The changes address significant security gaps as organizations struggle to assess risks linked to rapidly evolving AI systems and external suppliers. By integrating these controls, entities can better navigate threats posed by agentic AI and complex vendor networks.
The new AI Security Assessment includes 55 specific control requirements mapped to AI threats. Additionally, the MyCSF Questionnaire Responder utilizes AI to complete 70% of common questions, saving an estimated 7 hours per 80-question form with 90% accuracy.
The players
HITRUST
HITRUST is a standards organization that provides security and privacy frameworks for various industries to help manage risk and ensure data protection compliance.
The details
The updated HITRUST CSF v11.9 framework now covers AI vulnerability research, post-quantum encryption, and agentic AI security. The new Report Centre allows organizations to securely share watermarked certification reports directly with partners to improve due diligence speed.
Timeline
October 28, 2026: HITRUST released the new security tools and framework updates.
2025: 99.62% of HITRUST-certified environments reported no breach.
The Tech Race
This release extends the reach of the HITRUST CSF v11.9 framework by codifying security standards for emerging AI architectures. It positions the organization to replace manual due diligence processes with automated assessments in an increasingly high-stakes cybersecurity environment.
Users and developers can expect improved automation efficiency, specifically through the MyCSF tool which reduces manual questionnaire time by 7 hours per form. The certification requirements also force third-party SaaS providers to meet stricter AI security standards, potentially leading to more secure vendor integrations.
The takeaway
Organizations should prioritize updating their third-party risk management protocols as external software providers were linked to nearly half of all breaches. Implementing automated assessment tools can help teams keep pace with the 61% year-on-year increase in AI-related security incidents.
Further reading
Learn more about evolving threats in our Cybersecurity section.
Live Poll
Do you trust that automated security tools are sufficient to protect data from modern AI threats?
