/scope-select

Determine appropriate HITRUST assessment scope (i1 vs r2)

# HITRUST Scope Selection

Helps determine whether to pursue i1, r2, or e1 HITRUST CSF assessment based on organizational needs and constraints.

## Arguments
- `$1` - Organization type (optional: provider, payer, vendor, business-associate)
- `$2` - Primary driver (optional: hipaa, baa-requirement, vendor-requirement, competitive)

## Decision Factors

### i1 Assessment (Implemented, 1-year)

**Choose i1 when**:
- First-time HITRUST certification
- Vendor/supplier requirement (not provider)
- Annual recertification acceptable
- Budget constraints (<$100K for assessment)
- Want to test read...