For the External Assessor QA process, the individual who acts as the Quality Assurance Reviewer for
an assessor organization can also be the Engagement Executive.
For an r2 assessment, HITRUST requires a Corrective Action Plan (CAP) when the Control Reference
required for certification scored a 70 or less, and Implementation scores less than 100%.