156 controls · 18 families Unanswered

Information Security Management Program1

Open Information Security Management Program

Access Control8

Open Access Control

Network Access Control7

Open Network Access Control

Operating System Access Control6

Open Operating System Access Control

Application and Information Access Control2

Open Application and Information Access Control

Mobile Computing and Teleworking2

Open Mobile Computing and Teleworking

Human Resources Security9

Risk Management4

Open Risk Management

Security Policy2

Open Security Policy

Organization of Information Security8

Open Organization of Information Security

External Parties3

Open External Parties

Compliance10

Open Compliance

Asset Management5

Open Asset Management

Physical and Environmental Security13

Open Physical and Environmental Security

Communications and Operations Management32

Open Communications and Operations Management

Information Systems Acquisition, Development, and Maintenance13

Open Information Systems Acquisition, Development, and Maintenance

Information Security Incident Management5

Open Information Security Incident Management

Business Continuity Management26

Open Business Continuity Management

HITRUST/Human Resources Security/31 of 156

02.eInformation Security Awareness, Education, and Training

Control family: Human Resources Security

Control description

All employees of the organization, and contractors and third-party users shall receive appropriate awareness training and regular updates in organizational policies and procedures, as relevant for their job function.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.