156 controls · 18 families Unanswered

Information Security Management Program1

Open Information Security Management Program

Access Control8

Open Access Control

Network Access Control7

Open Network Access Control

Operating System Access Control6

Open Operating System Access Control

Application and Information Access Control2

Open Application and Information Access Control

Mobile Computing and Teleworking2

Open Mobile Computing and Teleworking

Human Resources Security9

Open Human Resources Security

Risk Management4

Open Risk Management

Security Policy2

Organization of Information Security8

Open Organization of Information Security

External Parties3

Open External Parties

Compliance10

Open Compliance

Asset Management5

Open Asset Management

Physical and Environmental Security13

Open Physical and Environmental Security

Communications and Operations Management32

Open Communications and Operations Management

Information Systems Acquisition, Development, and Maintenance13

Open Information Systems Acquisition, Development, and Maintenance

Information Security Incident Management5

Open Information Security Incident Management

Business Continuity Management26

Open Business Continuity Management

HITRUST/Security Policy/40 of 156

04.aInformation Security Policy Document

Control family: Security Policy

Control description

Information Security Policy Document

Please see the More info on HITRUST CSF for the full text of this control.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.