HITRUST (BTS): Access control during divisional playoffs

For a second Saturday in a row, we came in to the office to work on the Paubox HITRUST assessment. Working on a Saturday during the NFL Divisional Playoff weekend is indeed part of our journey on the HITRUST RightStart program. Today we continued working on Section 11, Access Control. With 50 controls, it's by far the largest Section in the HITRUST assessment. Here's yet another Behind The Scenes (BTS) look at our HITRUST progress today.

Access Control

Here are some of the controls in Access Control I worked on today:

• User Privilege Management
• System Privilege Management
• Electronic Record Signatures policy
• File System Access policy
• Remote Access across Public Networks

We managed to hit our daily quota of completed controls before the Chiefs vs. Colts game ended. Definitely a secret bonus to finish for the day before 5pm. We're taking the day off tomorrow and will be back on the attack on Monday.

HITRUST

Founded in 2007, HITRUST Alliance is a not-for-profit organization whose mission is to champion programs that safeguard sensitive information and manage information risk for organizations across all industries and throughout the third-party supply chain. In collaboration with privacy, information security and risk management leaders from both the public and private sectors, HITRUST develops, maintains and provides broad access to its widely adopted common risk and compliance management and de-identification frameworks; related assessment and assurance methodologies; and initiatives advancing cyber sharing, analysis, and resilience.