Testing a manual control control which operates at a defined frequency
Testing a manual control operating as needed
Testing an automated control
Sampling from a point-in-time population
Testing a manual control which operates at a defined frequency
Frequency
Frequency: daily
HITRUST's sampling requirements for testing daily controls
Per HITRUST scoring rubric v3 and HITRUST CSF Assurance Program requirements (Oct. 2019) , a minimum of 25 days must be sampled. The population from which the sample is selected must include at least the 90 days leading up to the testing date and at most the 365 days leading up to the testing date.