Nashville-based KraftCPAs PLLC, one of Tennessee’s largest independent certified public accounting firms, has earned the designation of HITRUST CSF Assessor through the Health Information Trust Alliance (HITRUST). With this achievement, KraftCPAs is now approved to provide the services using the HITRUST CSF, a comprehensive security framework that addresses the multitude of security, privacy and regulatory challenges facing healthcare organizations in order to comply with healthcare (HIPAA, HITECH), third-party (PCI, COBIT) and government (NIST, FTC) regulations and standards. Kraft CPAs is one of approximately 10 HITRUST CSF Assessors in Tennessee.

CSF Assessors like KraftCPAs are critical to hel;ing uphold information security and privacy standards for the healthcare industry. They represent a core component of the HITRUST CSF program by providing trained resources to healthcare organizations of varying size and complexity in order to assess compliance with security control requirements and document corrective action (remediation) plans that align with the CSF.

For a firm to become a HITRUST CSF Assessor, it must have a minimum of five HITRUST Certified CSF Practitioners (CCSFP).  To qualify for this certification, each person must have at least two years of experience in both healthcare and information security prior to beginning the application process. Then they complete six to 10 hours of guided self-study and approximately 20 hours of face-to-face training before sitting for a two-hour exam. To maintain the certification, the professionals must also participate in ongoing training and recertify every two years. KraftCPAs, as a HITRUST CSF Assessor, was also required to develop and implement various organizational quality assurance procedures.

About KraftCPAs PLLC

Since its inception in 1958, KraftCPAs PLLC has become one of the largest independent certified public accounting firms in Tennessee. Founded by the late Joe Kraft, the firm has 16 members and a total staff of more than 190. With offices in Nashville, Columbia and Lebanon, the firm provides not only audit, tax, and accounting, but a broad range of consulting services to meet the needs of its clients. The risk assurance & advisory services practice works with clients in various industries to help them maintain the security of their data, meet regulatory compliance requirements, and add value to their business processes.

Kraft’s Certified CSF Practitioners:

  • Scott Nalley, CPA, CIA, CISA, CCSFP
  • Moni Cook, CPA, CHC, CCSFP
  • Tonya Tepthongsay, CISA, MBA, CCSFP
  • Chris Zotti, CPA, CISA, CCSFP