The result of this collaboration is the HITRUST Risk Management Framework, which combines best practice standards from frameworks such as HIPAA, ISO, EU GDPR, NIST and PCI to provide a scalable, riskbased certification for health care organizations and organizations that participate in the health care supply chain.