Certification requires all Requirement Statements to meet the 62.5% threshold.
From the chart:
"The Privacy Officer..." scored 42, below 62.5.
"Antivirus clients have..." scored 62, also below 62.5.
Because there are Requirement Statements below threshold, the assessment will contain Required CAPs, and certification cannot be awarded until remediation.
Extract Reference (HITRUST CSF Scoring Methodology [0192]):
Certification requires all Requirement Statements to meet the minimum scoring threshold; scores below 62.5 prevent certification.