HITRUST Launches New AI Security Assessment Tools
The updated framework adds 55 controls to address a 61% surge in AI-related security breaches.
Updated on Oct. 28, 2026 in Cybersecurity
Live Poll
Do you trust that automated security tools are sufficient to protect data from modern AI threats?
HITRUST has released a suite of security assessment tools and certification updates aimed at hardening defenses against AI and supply chain vulnerabilities. The update includes new frameworks for agentic AI and automated compliance responses to help organizations address rising third-party breach risks.
Why it matters
As AI-related security incidents rise by 61% year-on-year, these standards provide a formalized method for auditing complex, automated systems and external software vendors. The framework aims to close security gaps that currently leave enterprise systems exposed to risks introduced by third-party integrations.
The updated HITRUST CSF v11.9 framework adds 55 specific control requirements focused on AI security threats. Additionally, the new MyCSF Questionnaire Responder can automate 70% of common security questions, saving roughly seven hours of manual labor per 80-question form with 90% accuracy.
The players
HITRUST
An organization that develops and manages security frameworks and certification standards for global enterprise compliance.
The details
The AI Security Assessment framework evaluates security through 55 control requirements that map specific technical threats to established safeguards. The MyCSF tool leverages existing compliance evidence to populate due diligence forms, utilizing an automated engine to answer 70% of common inquiries. It specifically addresses agentic AI—autonomous software that performs tasks without human intervention—as well as post-quantum encryption protocols to secure data against future decryption capabilities.
Timeline
2025: 99.62% of HITRUST-certified environments reported no breaches.
October 28, 2026: HITRUST released new AI security tools and framework updates.
The Tech Race
This release marks a shift toward operationalizing AI security through formalized, auditable standards rather than ad-hoc practices. It places HITRUST in direct competition with emerging niche frameworks as companies race to mitigate the 61% increase in AI-linked security breaches seen over the past year.
Security and compliance teams can begin using the updated CSF v11.9 framework immediately to streamline third-party risk assessments. The automation tools are available to existing subscribers, enabling them to reduce manual questionnaire burdens by approximately seven hours per form.
The takeaway
Organizations should prioritize reviewing their AI security posture against the 55 new control requirements provided in the latest HITRUST update. Watch for continued data on breach prevention rates in 2027 to see if these tools effectively lower the 48% third-party involvement rate in security incidents.
Further reading
For broader trends in enterprise defense, explore our Cybersecurity section.
Source note: This article includes information reported by SecurityBrief Asia.
Live Poll
Do you trust that automated security tools are sufficient to protect data from modern AI threats?
