HITRUST12

Requirements in this framework

• Access and identity controls
• Asset and configuration controls
• Assurance and continuous improvement
• Business continuity and disaster recovery readiness
• Compliance assurance and control testing
• Data classification and handling safeguards
• Incident response and resilience
• Policy and standards governance
• Program governance and risk management
• Security operations and monitoring
• Third-party and supply chain risk assurance
• Vulnerability and threat management