By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organisations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls