When partially inheriting a requirement statement score from an external cloud service provider, the weighting applied to the score is determined primarily by the assessed entity and the service provider. [0190]
The weighting of partially inherited scores in HITRUST is determined by HITRUST's methodology, not by mutual agreement between the assessed entity and service provider.
Organizations may identify which portions of a requirement are inherited vs. managed internally, but the actual scoring mechanics are controlled by the HITRUST CSF Assurance methodology to ensure consistency.
Extract Reference (HITRUST CSF Inheritance Guidance [0190]):
Weighting for partial inheritance is calculated using HITRUST's scoring methodology, not negotiated between entities.
Dalene
2 hours agoChantell
5 days agoAvery
10 days agoShelba
16 days agoCarin
2 months agoKristeen
2 months agoVivan
2 months agoTashia
3 months agoRuthann
3 months agoPaola
3 months agoStevie
3 months agoLucy
3 months agoMargot
3 months agoDylan
4 months agoRanee
4 months agoStefanie
4 months ago