Controls
This section explains the features and terminology around controls.
What are in-scope production systems?
What are control owners?
Understanding Unified Controls
Unified Controls - Frequently Asked Questions
HITRUST to Unified Control Mapping
GDPR to Unified Control Map
CCPA to Unified Control Map
PCI to Unified Control Map
HIPAA to Unified Control Map
ISO 2700 1 & 2 to Unified Control Map
SOC 2 to Unified Control Map
User-Created Custom Unified Controls
Understanding Shared Controls
Why do I see inactive monitors and collectors under my controls?
Self-Service Content Management
Framework Controls
HIPAA CE Privacy - Authorized and Unauthorized Disclosures
What are Connected Tools?
TEMPLATE: Job Description
AI Risk Assessment Template
Notice of Privacy Practices (NPP)
Authorization for Use or Disclosure of PHI
Access Request Form
Amendment Request Form
Complaint Form
Disclosure Log Template
Breach Notification Template
Training Acknowledgment Form
Privacy Risk Assessment
Corrective Action Plan
Confidential Communication Request
Accounting of Disclosures Request
Sanction Policy Documentation
Annual HIPAA Compliance Review Checklist
HIPAA Retention Schedule
Genetic Information Use Instructions
Retention Schedule
Incident Response Plan
Business Associate Agreement (BAA)
HIPAA Privacy Charter
Fundraising Activities and Marketing Disclosures
Template for PHI De-Identification Requests