vendor-management

vendor-management Controls

4 controls across 3 frameworks.

CISA CPG

Third-party vendors are required to meet minimum security standards

Governance and Training / Governance and Training

Obtain satisfactory assurances from business associates that they will appropriately safeguard ePHI

Administrative Safeguards / Business Associate Contracts

Ensure contracts or other arrangements with business associates meet HIPAA requirements and provide satisfactory assurances of ePHI protection

Organizational Requirements / Business Associate Contract Requirements

Cybersecurity requirements are integrated into contracts with suppliers

Govern / Cybersecurity Supply Chain Risk Management