Each HITRUST CSF-certified company must undergo a full reassessment bi-annually and a partial one in the interim.