TIM-6730

Health Information Trust Alliance. (2021). One framework, one assessment, globally. HITRUST CSF.
This resource highlights the foundation of HITRUST programs and services.

National Institute of Standards and Technology. (2018, April 16). Framework for improving critical infrastructure cybersecurity, version 1.1. CRSC.
This resource refines, clarifies, and enhances previous version of the cybersecurity framework. Focus reading on the executive summary and pages 1–19.

National Institute of Standards and Technology. (2018, December). Special publication 800-37 revision 2.
This resource describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. Focus reading on the abstract, executive summary, and pages 8–18.

Puchley, T., & Toppi, C. (2018). ERM: Evolving from risk assessment to strategic risk management. HFM (Healthcare Financial Management), 1–5.
This resource discusses the evolution of enterprise risk management (ERM) capabilities from risk assessment to strategic risk management in the U.S. healthcare ecosystem.

Bellad, A., & Gupta, A. (2018). Process of development of WHO Guidelines. Indian Journal of Community Health, 30(Supp1), 95–100.
This resource contains recommendations about health interventions, whether these are clinical, public health, or policy recommendations.

Healthcare and Public Health (HPH) Joint Partnership. (2016, May). Healthcare Sector Cybersecurity Framework Implementation Guide.
This resource seeks to help Healthcare Sector organizations understand and use the HITRUST RMF to achieve the goals of the NIST CSF. It also presents background information on the NIST and HITRUST frameworks, including potential benefits to Healthcare Sector organizations. Focus reading on pages 9 – 28.

Calyptix Security. (2018, June 11). Top 5 cybersecurity frameworks in healthcare.
This resource highlights the history of the top five cybersecurity frameworks.