HIPAA is a federal regulation with extensive and often interpretative requirements that compliance teams must track rigorously. It provides strict requirements for handling health data, and failing to adhere to the requirements can result in considerable penalties and legal consequences, which can stress out compliance teams.
To ease this issue, the HITRUST Alliance developed the HITRUST CSF—an elaborate security framework that brings clarity to your compliance workflow and helps you adhere to HIPAA and many other regulations with confidence.
While HIPAA and HITRUST are complementary, it’s still worth noting the key differences between them. This knowledge will help you get your compliance priorities in order and plan your resources accordingly.
Our HITRUST vs. HIPAA analysis will go through the key differences between these healthcare compliances and explore the relationship between the two.
HIPAA and HITRUST CSF: At a glance
HIPAA is a privacy regulation that aims to protect sensitive patient data from being disclosed without appropriate consent. Affected healthcare organizations must interpret and implement its controls according to their size, complexity, and risk exposure.
By contrast, HITRUST is a far more thorough security and privacy framework that helps organizations improve their security posture and manage several regulatory compliances, including HIPAA.
Let’s briefly visit each framework below.
HIPAA
HIPAA is a mandatory federal regulation that governs the security of U.S. residents’ protected health information (PHI). Any organization in the healthcare sector that stores, manages, or processes PHI must comply with it regardless of their location.
The challenge here lies in the regulation’s comprehensive nature paired with a lack of clear guidance. There’s no one-size-fits-all approach to complying with HIPAA, which complicates adherence to the many scattered requirements.
{{cta_withimage13="/cta-modules"}} | HIPAA compliance checklist
HITRUST CSF
The HITRUST CSF is an elaborate framework designed to help organizations implement industry-standard security controls and comply with different regulations—which makes your compliance workflows clear and targeted.
The framework was developed in 2007 and was initially oriented toward healthcare organizations and entities that handle PHI. Today, the framework is widely accepted across industries. Unlike HIPAA, the HITRUST CSF is a prescriptive framework and has little to no room for interpretation.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
The relationship between HIPAA and HITRUST CSF
HIPAA and HITRUST CSF aren’t interchangeable but are compatible—HITRUST CSF can help you comply with HIPAA by providing structured guidance for meeting the relevant requirements.
HITRUST not only reduces the occasional vagueness with HIPAA but also helps demonstrate that your security controls meet HIPAA’s standards. The framework also directly maps to HIPAA, so implementing it can simplify HIPAA compliance to an extent.
Still, HIPAA and HITRUST have considerable distinctions between them that should help you set your workflow priorities.
4 key differences between HIPAA and HITRUST
HIPAA and HITRUST primarily differ in the following four categories:
- Legal context
- Industry and application
- Compliance and certification process
- Perceived benefits
1. Legal context
HIPAA is a baseline requirement for every healthcare organization because of its status as an authoritative federal law. Non-compliance can lead to various consequences, most notably:
- Penalties: With the introduction of HITECH, maximum annual penalties for HIPAA non-compliance have increased from $25,000 to over $2 million. The Office for Civil Rights (OCR) also has more resources now to pursue non-compliant entities.
- Operational disruptions: Failure to comply with HIPAA is likely to stunt your organization’s growth and prevent you from going about daily operations as suppliers, partners, and other third parties may not want to engage with you.
- Legal escalations: HIPAA violations can sometimes have criminal implications and expose your organization to legal action.
HITRUST non-compliance, on the other hand, doesn’t have any legal consequences—the HITRUST CSF is a third-party, voluntary framework, so its implementation is at your discretion. It’s primarily focused on information security, covering security best practices beyond HIPAA.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
2. Industry and application
HIPAA only applies to healthcare organizations, which are split into covered entities and business associates. The following table provides examples of both:
Some HIPAA rules are different for covered entities and business associates, which can complicate interpretation and application at times.
HITRUST also caters to healthcare organizations, but the framework’s latest version has evolved to support all sectors, including finance, SaaS, and education. This versatility ensures any organization can implement the framework to demonstrate comprehensive security and privacy practices regardless of the nature of their business.
3. Compliance and certification process
The certification process is where you’ll notice a significant difference between HIPAA and HITRUST. The former requires a robust and complicated compliance structure—one that’s monitored by the U.S. Department of Health and Human Services (HHS).
The main problem with HIPAA compliance is a lack of precise guidance and direction. For instance, while HIPAA imposes various rules, it doesn’t clearly define which controls you must have in place to follow them.
The HITRUST CSF, on the other hand, has a straightforward certification process and offers direct and prescriptive compliance guidance that maps 50+ standards and regulations. It even allows you to choose between three specific certification levels, giving you more space to mature your security program in a progressive manner. The three levels are:
- e1: Entry-level certification encompassing 44 critical security controls
- i1: A more robust assessment with 187 controls for greater assurance
- r2: The most complete certification level with a custom number of controls (out of 2,000+ in total)
Achieving the first two certification levels is particularly streamlined due to their standardization. Even if you opt for the r2 certification, you’ll still have a finite number of controls to implement to ensure HITRUST compliance.
The certification process is quick and efficient because of a flexible HITRUST audit process, as well as due to MyCSF, HITRUST’s official compliance portal. MyCSF conveniently outlines the next steps and evidence required, potentially making your compliance management process cost-effective and efficient.
4. Perceived benefits
HIPAA’s immediate benefits include better protection of PHI and facilitating a culture of patient confidentiality in the healthcare sector. Since it’s a mandatory regulation, HIPAA compliance also helps you avoid the financial and legal consequences related to violations. This robust security and privacy framework also contributes to undisrupted operations.
HITRUST offers the same benefits due to its wide security control coverage, but it also comes with other notable advantages, most notably:
- Enhanced security with a risk-based approach: Implementing the HITRUST CSF allows you to shield your organizations from internal and external cybersecurity threats. It also helps you develop a comprehensive security program that addresses your risk profile better.
- Improved real-time protection and assurance: HITRUST CSF is a threat-adaptive framework, which means it is continuously updated to account for newer threats. The certificate must be renewed annually (or every two years for r2 certification), which keeps the assurance relevant.
- Increased stakeholder trust: A HITRUST certificate is an excellent way to demonstrate your security posture to customers, investors, and other stakeholders. It can help you avoid extensive security questionnaires during the procurement process and expedite the sales cycle.
- Integration with other compliance workflows: Since HITRUST harmonizes over 50 authoritative sources besides HIPAA (ISO 27001, GDPR, SOC 2, etc.), getting certified is an excellent way to support compliance with other regulations and standards.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
Does HITRUST certification ensure HIPAA compliance?
Obtaining a HITRUST certificate doesn’t make your organization HIPAA-compliant—it only implies the organization meets some of the regulation’s requirements and would still need to complete the residual provisions of the act.
The ideal way forward for any organization is to comply with both HITRUST and HIPAA to ensure the highest level of security and privacy. Implementing safeguards informed by both options leads to a solid security posture that demonstrates rigor and structure beyond regulatory compliance.
It may make sense to start with HITRUST certification before you pursue HIPAA fully as the former provides more practical direction. Once you obtain a HITRUST certificate, you’ll have a considerable head start to meet the requirements of HIPAA and numerous other standards.
Regardless of what certification or regulation you want to pursue, you’ll benefit from having a streamlined platform to monitor and maintain your security and compliance workflows. You may want to consider software like Vanta to help you eliminate duplicate work and get certified faster.
Make Vanta your HIPAA and HITRUST certification partner
Vanta is a trust management solution that automates up to +50% of compliance workflows for various standards and frameworks—including HIPAA and HITRUST. It streamlines tasks throughout the compliance process, from evidence collection and submission to security posture demonstration.
As HITRUST’s official automation partner, Vanta directly helps you get certified faster through its HITRUST CSF product. It comes with numerous automation features, such as:
- Integration with over 375 platforms, including MyCSF, which enables automated evidence collection
- Automated gap analysis to help you define your compliance roadmap
- Centralized tracking of HITRUST requirements and documentation
Vanta also offers pre-built resources like policy templates and automated tests to give your workflow a boost and maintain continuous compliance. The platform can make audits seamless with efficient evidence management and information tracking.
You can request a demo to see the platform in action and understand how it can be tailored for your team.
{{cta_simple16="/cta-modules"}} | HITRUST product page
Additional resources
HITRUST vs. HIPAA: Which to choose for healthcare compliance
Additional resources
HIPAA is a federal regulation with extensive and often interpretative requirements that compliance teams must track rigorously. It provides strict requirements for handling health data, and failing to adhere to the requirements can result in considerable penalties and legal consequences, which can stress out compliance teams.
To ease this issue, the HITRUST Alliance developed the HITRUST CSF—an elaborate security framework that brings clarity to your compliance workflow and helps you adhere to HIPAA and many other regulations with confidence.
While HIPAA and HITRUST are complementary, it’s still worth noting the key differences between them. This knowledge will help you get your compliance priorities in order and plan your resources accordingly.
Our HITRUST vs. HIPAA analysis will go through the key differences between these healthcare compliances and explore the relationship between the two.
HIPAA and HITRUST CSF: At a glance
HIPAA is a privacy regulation that aims to protect sensitive patient data from being disclosed without appropriate consent. Affected healthcare organizations must interpret and implement its controls according to their size, complexity, and risk exposure.
By contrast, HITRUST is a far more thorough security and privacy framework that helps organizations improve their security posture and manage several regulatory compliances, including HIPAA.
Let’s briefly visit each framework below.
HIPAA
HIPAA is a mandatory federal regulation that governs the security of U.S. residents’ protected health information (PHI). Any organization in the healthcare sector that stores, manages, or processes PHI must comply with it regardless of their location.
The challenge here lies in the regulation’s comprehensive nature paired with a lack of clear guidance. There’s no one-size-fits-all approach to complying with HIPAA, which complicates adherence to the many scattered requirements.
{{cta_withimage13="/cta-modules"}} | HIPAA compliance checklist
HITRUST CSF
The HITRUST CSF is an elaborate framework designed to help organizations implement industry-standard security controls and comply with different regulations—which makes your compliance workflows clear and targeted.
The framework was developed in 2007 and was initially oriented toward healthcare organizations and entities that handle PHI. Today, the framework is widely accepted across industries. Unlike HIPAA, the HITRUST CSF is a prescriptive framework and has little to no room for interpretation.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
The relationship between HIPAA and HITRUST CSF
HIPAA and HITRUST CSF aren’t interchangeable but are compatible—HITRUST CSF can help you comply with HIPAA by providing structured guidance for meeting the relevant requirements.
HITRUST not only reduces the occasional vagueness with HIPAA but also helps demonstrate that your security controls meet HIPAA’s standards. The framework also directly maps to HIPAA, so implementing it can simplify HIPAA compliance to an extent.
Still, HIPAA and HITRUST have considerable distinctions between them that should help you set your workflow priorities.
4 key differences between HIPAA and HITRUST
HIPAA and HITRUST primarily differ in the following four categories:
- Legal context
- Industry and application
- Compliance and certification process
- Perceived benefits
1. Legal context
HIPAA is a baseline requirement for every healthcare organization because of its status as an authoritative federal law. Non-compliance can lead to various consequences, most notably:
- Penalties: With the introduction of HITECH, maximum annual penalties for HIPAA non-compliance have increased from $25,000 to over $2 million. The Office for Civil Rights (OCR) also has more resources now to pursue non-compliant entities.
- Operational disruptions: Failure to comply with HIPAA is likely to stunt your organization’s growth and prevent you from going about daily operations as suppliers, partners, and other third parties may not want to engage with you.
- Legal escalations: HIPAA violations can sometimes have criminal implications and expose your organization to legal action.
HITRUST non-compliance, on the other hand, doesn’t have any legal consequences—the HITRUST CSF is a third-party, voluntary framework, so its implementation is at your discretion. It’s primarily focused on information security, covering security best practices beyond HIPAA.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
2. Industry and application
HIPAA only applies to healthcare organizations, which are split into covered entities and business associates. The following table provides examples of both:
Some HIPAA rules are different for covered entities and business associates, which can complicate interpretation and application at times.
HITRUST also caters to healthcare organizations, but the framework’s latest version has evolved to support all sectors, including finance, SaaS, and education. This versatility ensures any organization can implement the framework to demonstrate comprehensive security and privacy practices regardless of the nature of their business.
3. Compliance and certification process
The certification process is where you’ll notice a significant difference between HIPAA and HITRUST. The former requires a robust and complicated compliance structure—one that’s monitored by the U.S. Department of Health and Human Services (HHS).
The main problem with HIPAA compliance is a lack of precise guidance and direction. For instance, while HIPAA imposes various rules, it doesn’t clearly define which controls you must have in place to follow them.
The HITRUST CSF, on the other hand, has a straightforward certification process and offers direct and prescriptive compliance guidance that maps 50+ standards and regulations. It even allows you to choose between three specific certification levels, giving you more space to mature your security program in a progressive manner. The three levels are:
- e1: Entry-level certification encompassing 44 critical security controls
- i1: A more robust assessment with 187 controls for greater assurance
- r2: The most complete certification level with a custom number of controls (out of 2,000+ in total)
Achieving the first two certification levels is particularly streamlined due to their standardization. Even if you opt for the r2 certification, you’ll still have a finite number of controls to implement to ensure HITRUST compliance.
The certification process is quick and efficient because of a flexible HITRUST audit process, as well as due to MyCSF, HITRUST’s official compliance portal. MyCSF conveniently outlines the next steps and evidence required, potentially making your compliance management process cost-effective and efficient.
4. Perceived benefits
HIPAA’s immediate benefits include better protection of PHI and facilitating a culture of patient confidentiality in the healthcare sector. Since it’s a mandatory regulation, HIPAA compliance also helps you avoid the financial and legal consequences related to violations. This robust security and privacy framework also contributes to undisrupted operations.
HITRUST offers the same benefits due to its wide security control coverage, but it also comes with other notable advantages, most notably:
- Enhanced security with a risk-based approach: Implementing the HITRUST CSF allows you to shield your organizations from internal and external cybersecurity threats. It also helps you develop a comprehensive security program that addresses your risk profile better.
- Improved real-time protection and assurance: HITRUST CSF is a threat-adaptive framework, which means it is continuously updated to account for newer threats. The certificate must be renewed annually (or every two years for r2 certification), which keeps the assurance relevant.
- Increased stakeholder trust: A HITRUST certificate is an excellent way to demonstrate your security posture to customers, investors, and other stakeholders. It can help you avoid extensive security questionnaires during the procurement process and expedite the sales cycle.
- Integration with other compliance workflows: Since HITRUST harmonizes over 50 authoritative sources besides HIPAA (ISO 27001, GDPR, SOC 2, etc.), getting certified is an excellent way to support compliance with other regulations and standards.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
Does HITRUST certification ensure HIPAA compliance?
Obtaining a HITRUST certificate doesn’t make your organization HIPAA-compliant—it only implies the organization meets some of the regulation’s requirements and would still need to complete the residual provisions of the act.
The ideal way forward for any organization is to comply with both HITRUST and HIPAA to ensure the highest level of security and privacy. Implementing safeguards informed by both options leads to a solid security posture that demonstrates rigor and structure beyond regulatory compliance.
It may make sense to start with HITRUST certification before you pursue HIPAA fully as the former provides more practical direction. Once you obtain a HITRUST certificate, you’ll have a considerable head start to meet the requirements of HIPAA and numerous other standards.
Regardless of what certification or regulation you want to pursue, you’ll benefit from having a streamlined platform to monitor and maintain your security and compliance workflows. You may want to consider software like Vanta to help you eliminate duplicate work and get certified faster.
Make Vanta your HIPAA and HITRUST certification partner
Vanta is a trust management solution that automates up to +50% of compliance workflows for various standards and frameworks—including HIPAA and HITRUST. It streamlines tasks throughout the compliance process, from evidence collection and submission to security posture demonstration.
As HITRUST’s official automation partner, Vanta directly helps you get certified faster through its HITRUST CSF product. It comes with numerous automation features, such as:
- Integration with over 375 platforms, including MyCSF, which enables automated evidence collection
- Automated gap analysis to help you define your compliance roadmap
- Centralized tracking of HITRUST requirements and documentation
Vanta also offers pre-built resources like policy templates and automated tests to give your workflow a boost and maintain continuous compliance. The platform can make audits seamless with efficient evidence management and information tracking.
You can request a demo to see the platform in action and understand how it can be tailored for your team.
{{cta_simple16="/cta-modules"}} | HITRUST product page
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
| Role: | GRC responsibilities: |
|---|---|
| Board of directors | Central to the overarching GRC strategy, this group sets the direction for the compliance strategy. They determine which standards and regulations are necessary for compliance and align the GRC strategy with business objectives. |
| Chief financial officer | Primary responsibility for the success of the GRC program and for reporting results to the board. |
| Operations managers from relevant departments | This group owns processes. They are responsible for the success and direction of risk management and compliance within their departments. |
| Representatives from relevant departments | These are the activity owners. These team members are responsible for carrying out specific compliance and risk management tasks within their departments and for integrating these tasks into their workflows. |
| Contract managers from relevant department | These team members are responsible for managing interactions with vendors and other third parties in their department to ensure all risk management and compliance measures are being taken. |
| Chief information security officer (CISO) | Defines the organization’s information security policy, designs risk and vulnerability assessments, and develops information security policies. |
| Data protection officer (DPO) or legal counsel | Develops goals for data privacy based on legal regulations and other compliance needs, designs and implements privacy policies and practices, and assesses these practices for effectiveness. |
| GRC lead | Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the organization’s library of security controls. |
| Cybersecurity analyst(s) | Implements and monitors cybersecurity measures that are in line with the GRC program and business objectives. |
| Compliance analyst(s) | Monitors the organization’s compliance with all regulations and standards necessary, identifies any compliance gaps, and works to mitigate them. |
| Risk analyst(s) | Carries out the risk management program for the organization and serves as a resource for risk management across various departments, including identifying, mitigating, and monitoring risks. |
| IT security specialist(s) | Implements security controls within the IT system in coordination with the cybersecurity analyst(s). |
