156 controls · 18 families Unanswered

Information Security Management Program1

Open Information Security Management Program

Access Control8

Open Access Control

Network Access Control7

Open Network Access Control

Operating System Access Control6

Open Operating System Access Control

Application and Information Access Control2

Open Application and Information Access Control

Mobile Computing and Teleworking2

Open Mobile Computing and Teleworking

Human Resources Security9

Open Human Resources Security

Risk Management4

Open Risk Management

Security Policy2

Open Security Policy

Organization of Information Security8

External Parties3

Open External Parties

Compliance10

Open Compliance

Asset Management5

Open Asset Management

Physical and Environmental Security13

Open Physical and Environmental Security

Communications and Operations Management32

Open Communications and Operations Management

Information Systems Acquisition, Development, and Maintenance13

Open Information Systems Acquisition, Development, and Maintenance

Information Security Incident Management5

Open Information Security Incident Management

Business Continuity Management26

Open Business Continuity Management

HITRUST/Organization of Information Security/46 of 156

05.eConfidentiality Agreements

Control family: Organization of Information Security

Control description

Requirements for confidentiality or non-disclosure agreements reflecting the organization's needs for the protection of information shall be identified and regularly reviewed.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.