The certification you choose for your organization should depend upon your client’s needs. If you are an organization that sells to international clients, ISO 27001 is likely more recognizable to those clients than HITRUST is. However, in the United States, healthcare entities are likely to know HITRUST over the ISO 27001 standards.