HITRUST, the provider of a widely adopted cybersecurity assurance framework, has created a wholly owned subsidiary called IRIDX. The new unit will evaluate residual information risk and estimate potential financial exposure using proprietary scoring models, data analytics, and methodologies that have been refined over approximately 18 months.
IRIDX operates as a separate entity to preserve independence in risk assessment, scoring, and reporting. It is fully funded by HITRUST without external investment, and its interim leader is founder and executive chairman Daniel Nutkis while a permanent executive is sought. Based in Frisco, Texas, IRIDX shares facilities and resources with HITRUST under an arms‑length services agreement, though staffing details remain undisclosed.
Source: Corporate Compliance Insights