HITRUST CSF (r2 / e1 / i1) readiness for digital health. Realistic timelines, costs, and the controls that fail audits in this vertical.