156 controls · 18 families Unanswered

Information Security Management Program1

Open Information Security Management Program

Access Control8

Open Access Control

Network Access Control7

Open Network Access Control

Operating System Access Control6

Open Operating System Access Control

Application and Information Access Control2

Open Application and Information Access Control

Mobile Computing and Teleworking2

Open Mobile Computing and Teleworking

Human Resources Security9

Open Human Resources Security

Risk Management4

Open Risk Management

Security Policy2

Open Security Policy

Organization of Information Security8

Open Organization of Information Security

External Parties3

Open External Parties

Compliance10

Open Compliance

Asset Management5

Physical and Environmental Security13

Open Physical and Environmental Security

Communications and Operations Management32

Open Communications and Operations Management

Information Systems Acquisition, Development, and Maintenance13

Open Information Systems Acquisition, Development, and Maintenance

Information Security Incident Management5

Open Information Security Incident Management

Business Continuity Management26

Open Business Continuity Management

HITRUST/Asset Management/66 of 156

07.dClassification Guidelines

Control family: Asset Management

Control description

Information shall be classified in terms of its value, legal requirements, sensitivity, and criticality to the organization.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.