SOC providers for HITRUST requirements
Check the assessment type, validity and scope of any HITRUST claim against the service you will purchase.
1 provider
Browse all providers
Microsoft analysts investigate Defender incidents and execute permitted containment in MDR Plan 1.
You still own Defender licensing, deployment, access, exclusions and out-of-scope remediation
What they do Contain threats MDR
About this list
Request the current assessment or certification documentation for the relevant legal entity and service. Confirm which platforms, processes and locations it covers.
Treat the provider’s own status and support for your assessment as separate questions. Ask your assessor which provider evidence or inherited controls can be used for your specific scope.
Questions
Does the provider’s HITRUST status cover every product?
Do not assume it does. Compare the documented assessment scope with the exact service, deployment and supporting systems in your quote.
Can we use the provider’s evidence in our own assessment?
Confirm that with your assessor. Ask the provider for available documentation, control mappings and any conditions on evidence access or use.