Interesting. I haven’t fully read through the rule change, but seems like HHS is directly adopting the controls required by HITRUST? I have been out of the industry for a while. Always interesting how the industry shapes regulation and vice versa.
I'm not sure how meaningful it is to adopt some of the controls from HITRUST without any of the consequences.