compliance Controls
7 controls across 3 frameworks.
HIPAA
Perform periodic technical and non-technical evaluations of security controls in response to environmental or operational changes
Administrative Safeguards / Evaluation
Implement reasonable and appropriate policies and procedures to comply with the HIPAA Security Rule
Policies & Procedures / Policy Implementation
NIST CSF
Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered
Govern / Organizational Context
Legal, regulatory, and contractual requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed
Govern / Organizational Context
A cybersecurity risk management policy is established and enforced
Govern / Policy
The cybersecurity policy is reviewed and updated to reflect changes in requirements, threats, and technology
Govern / Policy