156 controls · 18 families Unanswered

Information Security Management Program1

Open Information Security Management Program

Access Control8

Open Access Control

Network Access Control7

Operating System Access Control6

Open Operating System Access Control

Application and Information Access Control2

Open Application and Information Access Control

Mobile Computing and Teleworking2

Open Mobile Computing and Teleworking

Human Resources Security9

Open Human Resources Security

Risk Management4

Open Risk Management

Security Policy2

Open Security Policy

Organization of Information Security8

Open Organization of Information Security

External Parties3

Open External Parties

Compliance10

Open Compliance

Asset Management5

Open Asset Management

Physical and Environmental Security13

Open Physical and Environmental Security

Communications and Operations Management32

Open Communications and Operations Management

Information Systems Acquisition, Development, and Maintenance13

Open Information Systems Acquisition, Development, and Maintenance

Information Security Incident Management5

Open Information Security Incident Management

Business Continuity Management26

Open Business Continuity Management

HITRUST/Network Access Control/10 of 156

01.iPolicy on the use of network services

Control family: Network Access Control

Control description

Users should only be provided with access to internal and external network services that they have been specifically authorized to use. Authentication and authorization mechanisms shall be applied to users and equipment.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.