When partially inheriting a requirement statement score from an external cloud service provider, the weighting applied to the score is determined primarily by the assessed entity and the service provider. [0190]
The weighting of partially inherited scores in HITRUST is determined by HITRUST's methodology, not by mutual agreement between the assessed entity and service provider.
Organizations may identify which portions of a requirement are inherited vs. managed internally, but the actual scoring mechanics are controlled by the HITRUST CSF Assurance methodology to ensure consistency.
Extract Reference (HITRUST CSF Inheritance Guidance [0190]):
Weighting for partial inheritance is calculated using HITRUST's scoring methodology, not negotiated between entities.
Carin
15 days agoKristeen
20 days agoVivan
25 days agoTashia
1 month agoRuthann
1 month agoPaola
1 month agoStevie
2 months agoLucy
2 months agoMargot
2 months agoDylan
2 months agoRanee
2 months agoStefanie
2 months ago