Preparing for HITRUST without overbuilding

Preparing for HITRUST without overbuilding

More controls don't always mean better readiness. Learn how to focus your HITRUST preparation on what actually matters, avoid unnecessary work, and build a program that supports a successful assessment.

December 2, 2026
30 minutes
Preparing for HITRUST without overbuilding

Why tune in?

Every session combines a focused discussion with live audience Q&A, giving you direct access to the people who review evidence every day.

Where should you start with HITRUST?

Understand how to determine your assessment scope, identify applicable requirements, and prioritize the controls that matter most.

What are teams overcomplicating?

Explore common areas of unnecessary work, from excessive documentation to implementing controls beyond what's required for your assessment.

How do you know when you're actually ready?

Learn what assessors look for, how to identify gaps before validation, and what should be in place before your assessment begins.

Meet the people behind the conversation

James Fletcher

Lucas Baiocchi

Lucas brings more than seven years of information security audit and assessment experience. He leads HITRUST assessments at Thoropass, helping organizations evaluate controls, validate effectiveness, and turn complex requirements into actionable security improvements.

Manager, HITRUST InfoSec Assurance
Thoropass