Enterprise Security Assessment targets to develop an overview of the organization's security posture. HiTRUST will derive this overview from interviews with key personnel, reviews of security and network documentation, examination of network and server configuration, etc. HiTRUST will recommend practical measures to improve client's network security and align client's network security profile with industry best practices or standards and point out directions for effective investment.

Security is a multifaceted discipline, involving number of ingredients for a comprehensive security posture. HiTRUST provides a detailed assessment of an organization based on the following areas:

	Security and privacy management
	Risk management and governance
	Security policies and practices
	Information classification and management
	Technical security controls
	Personnel security controls
	Security awareness and training
	Physical and environment controls
	Incident management
	Vulnerability management
	Virus protection
	Business resumption and disaster recovery