Due to the many complexities of HIPAA, many organizations find it demanding to interpret and implement its evolving requirements confidently. There have been instances of organizations missing HIPAA compliance and facing significant penalties due to lack of compliance and potential for human errors. The HITECH Act was introduced primarily to combat HIPAA’s complexities and reduce the risk of non-compliance.
HITECH aims to encourage organizations to follow HIPAA’s key rules with a particular focus on technology. While the law has considerably modernized the healthcare sector, it may still create friction by putting an additional regulatory burden on the affected organizations.
To resolve the issue of tracking multiple compliances, the HITRUST Alliance introduced the HITRUST CSF, a comprehensive framework that helps organizations work with HIPAA and HITECH’s standards simultaneously.
If you want to understand the main differences between the two frameworks, our HITECH vs. HITRUST guide will help. We’ll highlight the main distinctions and share some advice on how to prioritize between the two.
What is HITECH?
The HITECH Act is a federal law introduced in 2009 to fortify the enforcement of HIPAA’s existing rules (most notably the security rule). It’s considered an update to HIPAA that brought various changes, most notably:
- More rigorous penalties for HIPAA violations
- Data breach reporting rules
- Incentives for the implementation of electronic health records (EHRs)
As an integral component of HIPAA, HITECH is obligatory for all organizations that want to ensure full HIPAA compliance. While HITECH enables more comprehensive adherence to HIPAA’s requirements, it increases the oversight and operational burden for compliance teams.
What is the HITRUST CSF?
The HITRUST CSF is a robust security framework designed to help organizations improve their security posture and comply with 50+ standards and regulations, including HIPAA.
Among its many controls, the framework encompasses those that directly map to HIPAA, which makes it particularly helpful for healthcare organizations. The HITRUST CSF includes controls related to HIPAA’s Breach Notification Rule (created as a result of HITECH enactment), helping organizations meet some of HITECH’s requirements by following the same CSF.
This doesn’t mean the HITRUST framework is designed specifically for HIPAA or HITECH compliance. Today, HITRUST harmonizes with standards and regulations across sectors like finance and IT, making it one of the most authoritative frameworks for demonstrating security to stakeholders.
Additionally, being HITRUST-certified also helps organizations improve their risk management strategies because the framework receives regular updates to reflect the latest best practices in the field. This makes HITRUST an excellent option to help mature your security and risk management program.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
4 key differences between HITECH and HITRUST
While HITECH and HITRUST are complementary, there are four notable differences you should be aware of:
- Legal weight
- Structure
- Target organizations
- Compliance complexity
1. Legal weight
HITECH, being an extension of HIPAA, is a mandatory compliance component for organizations in the healthcare sector. The HITECH Act only made HIPAA even more stringent, most notably through increased violation penalties.
For more context, HITECH split HIPAA penalties into four tiers depending on the level of accountability:
- Lack of knowledge
- Lack of oversight
- Willful neglect (corrected within 30 days)
- Willful neglect (not corrected within 30 days)
Before HITECH, these tiers didn’t exist, so defaulting organizations would have to pay a mere $100 per violation, with an annual limit of $25,000. Today, the annual penalty limit is $2,000,000+, and the per-violation penalties are also significantly higher, which implies non-compliance can have severe legal and financial consequences.
By contrast, HITRUST CSF is a voluntary framework with zero legal weight, so there are no penalties or any drastic consequences for non-compliance. Its implementation is entirely up to you, though obtaining certification is still recommended if you operate in highly regulated industries.
This is especially true if you’re looking to become HIPAA-compliant. HITRUST makes it considerably easier to comply with HIPAA and HITECH while ensuring more transparency and stakeholder trust through an easily demonstrable security posture. Its benefits are primarily noticeable from the procedural, growth, and trust perspectives.
2. Structure
HITECH only adds to an existing regulation, so it’s not as robust as a standalone standard. It’s typically discussed in the context of HIPAA, enhanced through six components:
- Meaningful use program: Promotes the adoption of EHRs through incentives for organizations that use these systems appropriately
- Business associate HIPAA compliance: Enforces strict requirements business associate agreements must meet (which extends HIPAA requirements to subcontractors, including the relevant Security and Privacy Rule provisions)
- Breach notification rule: Requires organizations to notify the public of a data breach affecting Protected Health Information (PHI)
- Willful neglect and auditing: Allows the Office for Civil Rights (OCR) to audit organizations and investigate any intentional failure to comply
- HIPAA compliance updates: HITECH enhanced HIPAA with the Omnibus Rule (which required changes to the Security, Privacy, and Enforcement Rules) and higher violation penalties
- Access to electronic health records: Individuals should be able to access electronic health records easily
Unlike HITECH, HITRUST is a standalone, robust framework encompassing numerous security domains and controls to help organizations shield themselves from numerous threats. The general structure of HITRUST (updated: November 2024) is as follows:
- 14 control categories
- 49 control objectives
- 156 control references
- 2,600+ requirement statements
Besides HIPAA, HITRUST controls map to over 50 additional authoritative sources (such as GDPR, SOC 2, ISO 27001, PCI/DSS, etc.), which makes the framework highly beneficial for organizations with wider and more stringent compliance demands.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Target organizations
Much like HIPAA, HITECH is aimed at healthcare organizations, which HIPAA refers to as covered entities. HITECH expanded the definition of a covered entity to include business associates and their subcontractors, so they must also comply with the regulation’s requirements.
For example, a cloud provider offering a platform to pharmacies must follow all the HIPAA rules and is exposed to penalties in the event of non-compliance.
HITRUST is also aimed at healthcare organizations and any entity handling PHI, but it comes with a considerable advantage—applicability to other industries and inclusion of globally relevant standards. The comprehensive CSF unifies the compliance workflow for multiple frameworks, reducing workflow redundancy and making security programs easily scalable.
4. Compliance complexity
Meeting HITECH’s requirements should come as a natural consequence of becoming HIPAA-compliant, which is a major challenge for many organizations.
There are two reasons for this:
- HIPAA is an extensive, elaborate regulation with numerous requirements
- The regulation lacks clear implementation guidance and can get heavily interpretive due to the use of words like "reasonable" and "limited"
Even with a well-developed, systemized approach to HIPAA compliance, your security team might struggle to grasp and adhere to the relevant regulations. It doesn’t help that the regulation changes somewhat frequently, which further complicates ongoing compliance.
HITRUST eliminates this issue with its precise requirements. Depending on your security and compliance needs, you can choose between three certification levels:
Even if you opt for the highest certification level, you’ll have a clear set of controls to implement to ensure HITRUST compliance. Though, the number of controls may change as the framework updates.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
HITRUST or HITECH compliance: What to prioritize
The relationship between HITRUST and HITECH is complementary—you should adhere to both to ensure comprehensive security and regulatory requirements.
Still, some organizations prioritize HITRUST because of its extensive mappings and integration of key HIPAA compliance elements. Know that obtaining HITRUST certification doesn’t make an organization HIPAA-compliant in full. It only means you have controls in place that meet some of the regulation’s requirements.
However, being HITRUST-certified can add considerable value to an organization because the framework helps foster trust among partners, clients, and even regulatory bodies. It plays a key role in demonstrating accountability in data protection practices in any industry and context.
These benefits are only possible due to HITRUST's robust coverage, which also means the certification process can require a significant time investment, especially if you’re pursuing certification after proper guidance. To complete a HITRUST audit efficiently, you should leverage a multipurpose compliance automation solution like Vanta.
Vanta: HITRUST and HITECH compliance made easy
Software-supported compliance ensures you meet requirements without investing excessive time and resources—and Vanta helps you with precisely that.
It’s a trust management platform that streamlines and automates up to +50% of compliance workflows for various standards and frameworks, including HITRUST and HIPAA.
Vanta is HITRUST’s official automation partner, and it's among the quickest and most efficient ways to get certified. The platform offers an advanced HITRUST CSF product equipped with plenty of useful features, such as:
- Automated gap assessments for determining how close you are to full compliance
- Streamlined evidence gathering supported by over 375 integrations with major platforms
- Centralized tracking of HITRUST compliance with robust guidance
- Integration with MyCSF, HITRUST’s compliance portal
To eliminate duplicate work, Vanta also cross-references your controls with supported frameworks to identify if there are any you can reuse. This considerably cuts the internal mapping and review efforts, helping you confidently pursue multiple compliance frameworks.
Schedule a custom demo with Vanta experts to get a tailored overview of the product.
{{cta_simple16="/cta-modules"}} | HITRUST product page
Additional resources
HITECH vs. HITRUST: Key differences you need to know
Additional resources
Due to the many complexities of HIPAA, many organizations find it demanding to interpret and implement its evolving requirements confidently. There have been instances of organizations missing HIPAA compliance and facing significant penalties due to lack of compliance and potential for human errors. The HITECH Act was introduced primarily to combat HIPAA’s complexities and reduce the risk of non-compliance.
HITECH aims to encourage organizations to follow HIPAA’s key rules with a particular focus on technology. While the law has considerably modernized the healthcare sector, it may still create friction by putting an additional regulatory burden on the affected organizations.
To resolve the issue of tracking multiple compliances, the HITRUST Alliance introduced the HITRUST CSF, a comprehensive framework that helps organizations work with HIPAA and HITECH’s standards simultaneously.
If you want to understand the main differences between the two frameworks, our HITECH vs. HITRUST guide will help. We’ll highlight the main distinctions and share some advice on how to prioritize between the two.
What is HITECH?
The HITECH Act is a federal law introduced in 2009 to fortify the enforcement of HIPAA’s existing rules (most notably the security rule). It’s considered an update to HIPAA that brought various changes, most notably:
- More rigorous penalties for HIPAA violations
- Data breach reporting rules
- Incentives for the implementation of electronic health records (EHRs)
As an integral component of HIPAA, HITECH is obligatory for all organizations that want to ensure full HIPAA compliance. While HITECH enables more comprehensive adherence to HIPAA’s requirements, it increases the oversight and operational burden for compliance teams.
What is the HITRUST CSF?
The HITRUST CSF is a robust security framework designed to help organizations improve their security posture and comply with 50+ standards and regulations, including HIPAA.
Among its many controls, the framework encompasses those that directly map to HIPAA, which makes it particularly helpful for healthcare organizations. The HITRUST CSF includes controls related to HIPAA’s Breach Notification Rule (created as a result of HITECH enactment), helping organizations meet some of HITECH’s requirements by following the same CSF.
This doesn’t mean the HITRUST framework is designed specifically for HIPAA or HITECH compliance. Today, HITRUST harmonizes with standards and regulations across sectors like finance and IT, making it one of the most authoritative frameworks for demonstrating security to stakeholders.
Additionally, being HITRUST-certified also helps organizations improve their risk management strategies because the framework receives regular updates to reflect the latest best practices in the field. This makes HITRUST an excellent option to help mature your security and risk management program.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
4 key differences between HITECH and HITRUST
While HITECH and HITRUST are complementary, there are four notable differences you should be aware of:
- Legal weight
- Structure
- Target organizations
- Compliance complexity
1. Legal weight
HITECH, being an extension of HIPAA, is a mandatory compliance component for organizations in the healthcare sector. The HITECH Act only made HIPAA even more stringent, most notably through increased violation penalties.
For more context, HITECH split HIPAA penalties into four tiers depending on the level of accountability:
- Lack of knowledge
- Lack of oversight
- Willful neglect (corrected within 30 days)
- Willful neglect (not corrected within 30 days)
Before HITECH, these tiers didn’t exist, so defaulting organizations would have to pay a mere $100 per violation, with an annual limit of $25,000. Today, the annual penalty limit is $2,000,000+, and the per-violation penalties are also significantly higher, which implies non-compliance can have severe legal and financial consequences.
By contrast, HITRUST CSF is a voluntary framework with zero legal weight, so there are no penalties or any drastic consequences for non-compliance. Its implementation is entirely up to you, though obtaining certification is still recommended if you operate in highly regulated industries.
This is especially true if you’re looking to become HIPAA-compliant. HITRUST makes it considerably easier to comply with HIPAA and HITECH while ensuring more transparency and stakeholder trust through an easily demonstrable security posture. Its benefits are primarily noticeable from the procedural, growth, and trust perspectives.
2. Structure
HITECH only adds to an existing regulation, so it’s not as robust as a standalone standard. It’s typically discussed in the context of HIPAA, enhanced through six components:
- Meaningful use program: Promotes the adoption of EHRs through incentives for organizations that use these systems appropriately
- Business associate HIPAA compliance: Enforces strict requirements business associate agreements must meet (which extends HIPAA requirements to subcontractors, including the relevant Security and Privacy Rule provisions)
- Breach notification rule: Requires organizations to notify the public of a data breach affecting Protected Health Information (PHI)
- Willful neglect and auditing: Allows the Office for Civil Rights (OCR) to audit organizations and investigate any intentional failure to comply
- HIPAA compliance updates: HITECH enhanced HIPAA with the Omnibus Rule (which required changes to the Security, Privacy, and Enforcement Rules) and higher violation penalties
- Access to electronic health records: Individuals should be able to access electronic health records easily
Unlike HITECH, HITRUST is a standalone, robust framework encompassing numerous security domains and controls to help organizations shield themselves from numerous threats. The general structure of HITRUST (updated: November 2024) is as follows:
- 14 control categories
- 49 control objectives
- 156 control references
- 2,600+ requirement statements
Besides HIPAA, HITRUST controls map to over 50 additional authoritative sources (such as GDPR, SOC 2, ISO 27001, PCI/DSS, etc.), which makes the framework highly beneficial for organizations with wider and more stringent compliance demands.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Target organizations
Much like HIPAA, HITECH is aimed at healthcare organizations, which HIPAA refers to as covered entities. HITECH expanded the definition of a covered entity to include business associates and their subcontractors, so they must also comply with the regulation’s requirements.
For example, a cloud provider offering a platform to pharmacies must follow all the HIPAA rules and is exposed to penalties in the event of non-compliance.
HITRUST is also aimed at healthcare organizations and any entity handling PHI, but it comes with a considerable advantage—applicability to other industries and inclusion of globally relevant standards. The comprehensive CSF unifies the compliance workflow for multiple frameworks, reducing workflow redundancy and making security programs easily scalable.
4. Compliance complexity
Meeting HITECH’s requirements should come as a natural consequence of becoming HIPAA-compliant, which is a major challenge for many organizations.
There are two reasons for this:
- HIPAA is an extensive, elaborate regulation with numerous requirements
- The regulation lacks clear implementation guidance and can get heavily interpretive due to the use of words like "reasonable" and "limited"
Even with a well-developed, systemized approach to HIPAA compliance, your security team might struggle to grasp and adhere to the relevant regulations. It doesn’t help that the regulation changes somewhat frequently, which further complicates ongoing compliance.
HITRUST eliminates this issue with its precise requirements. Depending on your security and compliance needs, you can choose between three certification levels:
Even if you opt for the highest certification level, you’ll have a clear set of controls to implement to ensure HITRUST compliance. Though, the number of controls may change as the framework updates.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
HITRUST or HITECH compliance: What to prioritize
The relationship between HITRUST and HITECH is complementary—you should adhere to both to ensure comprehensive security and regulatory requirements.
Still, some organizations prioritize HITRUST because of its extensive mappings and integration of key HIPAA compliance elements. Know that obtaining HITRUST certification doesn’t make an organization HIPAA-compliant in full. It only means you have controls in place that meet some of the regulation’s requirements.
However, being HITRUST-certified can add considerable value to an organization because the framework helps foster trust among partners, clients, and even regulatory bodies. It plays a key role in demonstrating accountability in data protection practices in any industry and context.
These benefits are only possible due to HITRUST's robust coverage, which also means the certification process can require a significant time investment, especially if you’re pursuing certification after proper guidance. To complete a HITRUST audit efficiently, you should leverage a multipurpose compliance automation solution like Vanta.
Vanta: HITRUST and HITECH compliance made easy
Software-supported compliance ensures you meet requirements without investing excessive time and resources—and Vanta helps you with precisely that.
It’s a trust management platform that streamlines and automates up to +50% of compliance workflows for various standards and frameworks, including HITRUST and HIPAA.
Vanta is HITRUST’s official automation partner, and it's among the quickest and most efficient ways to get certified. The platform offers an advanced HITRUST CSF product equipped with plenty of useful features, such as:
- Automated gap assessments for determining how close you are to full compliance
- Streamlined evidence gathering supported by over 375 integrations with major platforms
- Centralized tracking of HITRUST compliance with robust guidance
- Integration with MyCSF, HITRUST’s compliance portal
To eliminate duplicate work, Vanta also cross-references your controls with supported frameworks to identify if there are any you can reuse. This considerably cuts the internal mapping and review efforts, helping you confidently pursue multiple compliance frameworks.
Schedule a custom demo with Vanta experts to get a tailored overview of the product.
{{cta_simple16="/cta-modules"}} | HITRUST product page
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
| Role: | GRC responsibilities: |
|---|---|
| Board of directors | Central to the overarching GRC strategy, this group sets the direction for the compliance strategy. They determine which standards and regulations are necessary for compliance and align the GRC strategy with business objectives. |
| Chief financial officer | Primary responsibility for the success of the GRC program and for reporting results to the board. |
| Operations managers from relevant departments | This group owns processes. They are responsible for the success and direction of risk management and compliance within their departments. |
| Representatives from relevant departments | These are the activity owners. These team members are responsible for carrying out specific compliance and risk management tasks within their departments and for integrating these tasks into their workflows. |
| Contract managers from relevant department | These team members are responsible for managing interactions with vendors and other third parties in their department to ensure all risk management and compliance measures are being taken. |
| Chief information security officer (CISO) | Defines the organization’s information security policy, designs risk and vulnerability assessments, and develops information security policies. |
| Data protection officer (DPO) or legal counsel | Develops goals for data privacy based on legal regulations and other compliance needs, designs and implements privacy policies and practices, and assesses these practices for effectiveness. |
| GRC lead | Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the organization’s library of security controls. |
| Cybersecurity analyst(s) | Implements and monitors cybersecurity measures that are in line with the GRC program and business objectives. |
| Compliance analyst(s) | Monitors the organization’s compliance with all regulations and standards necessary, identifies any compliance gaps, and works to mitigate them. |
| Risk analyst(s) | Carries out the risk management program for the organization and serves as a resource for risk management across various departments, including identifying, mitigating, and monitoring risks. |
| IT security specialist(s) | Implements security controls within the IT system in coordination with the cybersecurity analyst(s). |
