HITRUST CSF and ISO 27001 are robust information security frameworks widely implemented across industries. These frameworks provide organizations the direction they need to implement comprehensive security and data privacy practices with greater confidence.
While the two frameworks share a common purpose, their contexts and approaches differ slightly. That often makes organizations conflicted about which framework to follow or prioritize.
Our experts have prepared this HITRUST vs. ISO 27001 guide to outline the main distinctions between these two frameworks. We’ll also explore the scope and intended end goals of each option to help you make the right calls for your organization.
HITRUST CSF: An overview
The HITRUST CSF is a comprehensive framework designed to help organizations improve their security and compliance posture. It was released in 2007 and has undergone many updates over the years to help organizations account for evolving IT threats and ensure comprehensive controls coverage.
The latest version of the HITRUST CSF is v11.3, which offers a streamlined set of controls to help organizations meet diverse compliance requirements, integrating with authoritative standards and sources like NIST Special Publication (SP) 800-172 and FedRAMP.
HITRUST is a popular choice among security teams because of its scalable framework that works for organizations of all sizes. It also makes trust-building with stakeholders easier because of many benefits, such as:
- Enhanced organizational security
- Effective risk management
- Demonstrable compliance with major standards and regulations
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
ISO 27001: An overview
ISO 27001 is a globally recognized standard for cybersecurity and data protection. It’s been implemented by 70,000+ organizations in over 150 countries, which attests to the standard’s reputation and global appeal.
The standard’s main goal is to help organizations develop a demonstrable information security management system (ISMS). It defines a clear set of requirements an organization’s ISMS must meet to ensure advanced protection from cybersecurity threats.
The standard follows a 360° approach to security across its key components—policies, people, and technologies. Similar to HITRUST, ISO 27001 backs your organization up with guidelines to implement an adaptable yet granular security setup.
So, where do these frameworks differ?
{{cta_withimage2="/cta-modules"}} | ISO 27001 certification checklist
5 differences between the HITRUST CSF and ISO 27001
Despite sharing a common goal, the HITRUST CSF and ISO 27001 frameworks have nuanced differences that can impact your security and compliance workflows.
Here are five important differentiators you should be aware of:
- Structure and controls coverage
- Applicability
- Certification and validity
- Compliance mapping
- Audit process
Let’s explore a detailed breakdown of each difference below.
1. Structure and controls coverage
When it comes to the number and diversity of controls, HITRUST is far more comprehensive than ISO 27001. The latest version of ISO 27001 covers 93 controls, which are further split into four categories:
- Organizations
- People
- Physical
- Technical
By contrast, the HITRUST CSF has significantly broader controls coverage. Its latest version includes over 2,000 controls you can pursue depending on your desired certification level. For instance, HITRUST’s lowest certification tier, e1, includes only 44 critical controls, while pursuing the highest level, r2, may require you to implement hundreds of controls based on your risk exposure. HITRUST controls are further split into 19 domains that encompass virtually all the crucial aspects of organizational security.
If you go by the sheer number of controls, HITRUST CSF casts a wider net and has the potential to provide assurance for all cybersecurity areas.
2. Applicability
The HITRUST CSF was initially designed for healthcare organizations or businesses associated with the healthcare sector. So, organizations that would collect, process, or store protected health information (PHI) had the most to benefit from the certification as most of the framework’s controls were designed to safeguard it.
However, the HITRUST framework has evolved significantly over the years—the latest version (v11.3) is industry-agnostic. It can work for organizations in any sector, including finance and technology companies based in the U.S. As a result, any organization that wants to fortify its security and ensure compliance with major regulations can implement HITRUST.
ISO 27001, on the other hand, has always been agnostic to an organization’s industry. It also has a significant global reach, making it a good fit for any organization regardless of location.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Certification and validity
ISO 27001 only has one certification level that encompasses all of the standard’s controls. Once you obtain a certificate, it’s valid for three years before it must be renewed.
By contrast, HITRUST CSF offers three certification levels:
Due to its tiered certification format, the HITRUST CSF is more flexible and adaptable to an organization’s needs. For instance, if you’re only getting started with security and compliance, the e1 assessment can be an excellent entry-level assurance option for implementing critical security controls in a demonstrable manner.
Similarly, organizations with maturing security programs can opt for r2 to implement advanced industry-standard controls. The r2 certification level is risk-based and tailored to an organization’s security and risk profile—the controls you implement are tailored to your organization, which is a notable benefit you don’t get with most frameworks.
4. Compliance mapping
As a specific standard focused on information security, ISO 27001 doesn’t map to many other standards and regulations. It overlaps with those that fulfill a similar purpose, such as SOC 2 and the NIST CSF.
This means that if you pursue ISO 27001 compliance, you won’t see many control overlaps with other standards and frameworks you need to follow. While the setup ensures basic security, the scope of security workflow optimization is limited here.
On the other hand, the HITRUST CSF is a more task-optimization-friendly option if you need a framework that lets you build the foundation for organization-wide comprehensive compliance. The framework implements and harmonizes over 50 authoritative sources—including ISO 27001 and similar frameworks like SOC 2 and the NIST CSF.
Besides them, the HITRUST CSF simplifies compliance with many additional standards and regulations, such as:
- HIPAA and HITECH
- GDPR
- PCI/DSS
- NIST AI RMF
- CIS Controls
From a practical perspective, after obtaining a HITRUST certificate, numerous controls will overlap with other frameworks already in place. As a result, you’ll be able to meet your other obligations more efficiently and cost-effectively. This is particularly true if you opt for a robust certification level like r2, which can include hundreds of controls mapped to other standards and regulations.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
5. Audit process
The workflow involved in preparing for a compliance audit can have a huge impact on your organizational resources.
The ISO 27001 audit comes in two forms—internal and external. You’ll have to conduct a compulsory internal audit that should typically happen in five stages:
- Documentation review
- Evidential audit/fieldwork
- Analysis
- Audit report
- Management review
When you’re ready for an external audit, an authorized auditor will verify that your ISMS meets the necessary standards of ISO 27001. They’ll review all the documentation you create for the purpose of the audit, after which they’ll perform fieldwork on a sample within the audit’s scope.
After the initial audit, your organization will undergo periodic surveillance audits that assess whether your ISMS continually adheres to the standard’s requirements.
Due to the higher number of controls, HITRUST audits are typically more elaborate (except for the base-level e1 audit)—but the process may seem more supportive and convenient. You get experts from HITRUST working with you to assess your security and fix any control gaps. The evidence sharing process also happens via HITRUST’s online portal, MyCSF, which reduces the busywork for your security team.
Here’s a quick overview of what the HITRUST certification process looks like:
- Pre-assessment: You’ll assess the scope of the controls you’ll implement for your desired certification level
- Readiness assessment: This stage isn’t mandatory, but you’ll want to conduct a readiness assessment to compare your existing controls to HITRUST’s requirements
- Validated assessment: An external HITRUST assessor will review your controls to make sure they pass HITRUST’s prescribed thresholds
- Quality assurance: If the validated assessment is successful, HITRUST’s QA analyst will perform the final review and provide feedback with remediation tasks if necessary
- Deliverable preparation and reviews: Upon successful completion of the assessment process, you’ll receive a report draft you can review within 30 days, after which you’ll get the final report
Should you adopt HITRUST or ISO 27001?
HITRUST CSF and ISO 27001 are complementary frameworks, which means you don’t have to choose between them. Ideally, you should aim to implement both to ensure robust security and privacy, especially if you want to improve client trust. If resources are a constraint, you can implement either framework and work toward incorporating the other over time.
As the HITRUST CSF directly maps to ISO 27001 and 50+ other frameworks, starting with it makes more sense than doing the opposite. Once you obtain a HITRUST certificate, you’ll have a solid foundation for ISO 27001 compliance. Plus, you can potentially meet additional regulatory obligations more efficiently.
A HITRUST certificate also serves as proof of a strong security posture, making it easier to build trust with prospects. You can considerably expedite any procurement process by shortening the cycle of extensive security reviews and questionnaires.
Regardless of your chosen framework, consider using process automation to fast-track ISO 27001 or HITRUST compliance tasks. Both frameworks can be quite extensive, and automation software ensures tasks like evidence gathering and control monitoring are less stressful for security teams.
{{cta_testimonial11="/cta-modules"}} | US Med-Equip Customer Story
Fast-track HITRUST and ISO 27001 compliance with Vanta
Vanta is an end-to-end trust management platform that automates up to +50% of compliance requirements for numerous standards—including HITRUST and ISO 27001. It’s also HITRUST’s official automation partner, which makes it an excellent choice for organizations that want to get certified smoothly.
The platform offers a comprehensive HITRUST CSF product equipped with various workflow resources and automation features, most notably:
- Automated gap assessment against numerous regulations and standards
- Centralized documentation and tracking of the certification process
- Automated evidence collection that streamlines disparate systems
- Over 350 integrations with major platforms (cloud providers, CRM systems, etc.)
- MyCSF integration to enable smooth evidence sharing
Vanta also offers a ISO 27001 solution, which streamlines the compliance process through features like automated access reviews and vulnerability management.
Schedule a custom demo today and let Vanta experts help you explore solutions tailored to your organization.
{{cta_simple16="/cta-modules"}} | HITRUST product page
Additional resources
HITRUST vs. ISO 27001: Key differences explained
Additional resources
HITRUST CSF and ISO 27001 are robust information security frameworks widely implemented across industries. These frameworks provide organizations the direction they need to implement comprehensive security and data privacy practices with greater confidence.
While the two frameworks share a common purpose, their contexts and approaches differ slightly. That often makes organizations conflicted about which framework to follow or prioritize.
Our experts have prepared this HITRUST vs. ISO 27001 guide to outline the main distinctions between these two frameworks. We’ll also explore the scope and intended end goals of each option to help you make the right calls for your organization.
HITRUST CSF: An overview
The HITRUST CSF is a comprehensive framework designed to help organizations improve their security and compliance posture. It was released in 2007 and has undergone many updates over the years to help organizations account for evolving IT threats and ensure comprehensive controls coverage.
The latest version of the HITRUST CSF is v11.3, which offers a streamlined set of controls to help organizations meet diverse compliance requirements, integrating with authoritative standards and sources like NIST Special Publication (SP) 800-172 and FedRAMP.
HITRUST is a popular choice among security teams because of its scalable framework that works for organizations of all sizes. It also makes trust-building with stakeholders easier because of many benefits, such as:
- Enhanced organizational security
- Effective risk management
- Demonstrable compliance with major standards and regulations
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
ISO 27001: An overview
ISO 27001 is a globally recognized standard for cybersecurity and data protection. It’s been implemented by 70,000+ organizations in over 150 countries, which attests to the standard’s reputation and global appeal.
The standard’s main goal is to help organizations develop a demonstrable information security management system (ISMS). It defines a clear set of requirements an organization’s ISMS must meet to ensure advanced protection from cybersecurity threats.
The standard follows a 360° approach to security across its key components—policies, people, and technologies. Similar to HITRUST, ISO 27001 backs your organization up with guidelines to implement an adaptable yet granular security setup.
So, where do these frameworks differ?
{{cta_withimage2="/cta-modules"}} | ISO 27001 certification checklist
5 differences between the HITRUST CSF and ISO 27001
Despite sharing a common goal, the HITRUST CSF and ISO 27001 frameworks have nuanced differences that can impact your security and compliance workflows.
Here are five important differentiators you should be aware of:
- Structure and controls coverage
- Applicability
- Certification and validity
- Compliance mapping
- Audit process
Let’s explore a detailed breakdown of each difference below.
1. Structure and controls coverage
When it comes to the number and diversity of controls, HITRUST is far more comprehensive than ISO 27001. The latest version of ISO 27001 covers 93 controls, which are further split into four categories:
- Organizations
- People
- Physical
- Technical
By contrast, the HITRUST CSF has significantly broader controls coverage. Its latest version includes over 2,000 controls you can pursue depending on your desired certification level. For instance, HITRUST’s lowest certification tier, e1, includes only 44 critical controls, while pursuing the highest level, r2, may require you to implement hundreds of controls based on your risk exposure. HITRUST controls are further split into 19 domains that encompass virtually all the crucial aspects of organizational security.
If you go by the sheer number of controls, HITRUST CSF casts a wider net and has the potential to provide assurance for all cybersecurity areas.
2. Applicability
The HITRUST CSF was initially designed for healthcare organizations or businesses associated with the healthcare sector. So, organizations that would collect, process, or store protected health information (PHI) had the most to benefit from the certification as most of the framework’s controls were designed to safeguard it.
However, the HITRUST framework has evolved significantly over the years—the latest version (v11.3) is industry-agnostic. It can work for organizations in any sector, including finance and technology companies based in the U.S. As a result, any organization that wants to fortify its security and ensure compliance with major regulations can implement HITRUST.
ISO 27001, on the other hand, has always been agnostic to an organization’s industry. It also has a significant global reach, making it a good fit for any organization regardless of location.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Certification and validity
ISO 27001 only has one certification level that encompasses all of the standard’s controls. Once you obtain a certificate, it’s valid for three years before it must be renewed.
By contrast, HITRUST CSF offers three certification levels:
Due to its tiered certification format, the HITRUST CSF is more flexible and adaptable to an organization’s needs. For instance, if you’re only getting started with security and compliance, the e1 assessment can be an excellent entry-level assurance option for implementing critical security controls in a demonstrable manner.
Similarly, organizations with maturing security programs can opt for r2 to implement advanced industry-standard controls. The r2 certification level is risk-based and tailored to an organization’s security and risk profile—the controls you implement are tailored to your organization, which is a notable benefit you don’t get with most frameworks.
4. Compliance mapping
As a specific standard focused on information security, ISO 27001 doesn’t map to many other standards and regulations. It overlaps with those that fulfill a similar purpose, such as SOC 2 and the NIST CSF.
This means that if you pursue ISO 27001 compliance, you won’t see many control overlaps with other standards and frameworks you need to follow. While the setup ensures basic security, the scope of security workflow optimization is limited here.
On the other hand, the HITRUST CSF is a more task-optimization-friendly option if you need a framework that lets you build the foundation for organization-wide comprehensive compliance. The framework implements and harmonizes over 50 authoritative sources—including ISO 27001 and similar frameworks like SOC 2 and the NIST CSF.
Besides them, the HITRUST CSF simplifies compliance with many additional standards and regulations, such as:
- HIPAA and HITECH
- GDPR
- PCI/DSS
- NIST AI RMF
- CIS Controls
From a practical perspective, after obtaining a HITRUST certificate, numerous controls will overlap with other frameworks already in place. As a result, you’ll be able to meet your other obligations more efficiently and cost-effectively. This is particularly true if you opt for a robust certification level like r2, which can include hundreds of controls mapped to other standards and regulations.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
5. Audit process
The workflow involved in preparing for a compliance audit can have a huge impact on your organizational resources.
The ISO 27001 audit comes in two forms—internal and external. You’ll have to conduct a compulsory internal audit that should typically happen in five stages:
- Documentation review
- Evidential audit/fieldwork
- Analysis
- Audit report
- Management review
When you’re ready for an external audit, an authorized auditor will verify that your ISMS meets the necessary standards of ISO 27001. They’ll review all the documentation you create for the purpose of the audit, after which they’ll perform fieldwork on a sample within the audit’s scope.
After the initial audit, your organization will undergo periodic surveillance audits that assess whether your ISMS continually adheres to the standard’s requirements.
Due to the higher number of controls, HITRUST audits are typically more elaborate (except for the base-level e1 audit)—but the process may seem more supportive and convenient. You get experts from HITRUST working with you to assess your security and fix any control gaps. The evidence sharing process also happens via HITRUST’s online portal, MyCSF, which reduces the busywork for your security team.
Here’s a quick overview of what the HITRUST certification process looks like:
- Pre-assessment: You’ll assess the scope of the controls you’ll implement for your desired certification level
- Readiness assessment: This stage isn’t mandatory, but you’ll want to conduct a readiness assessment to compare your existing controls to HITRUST’s requirements
- Validated assessment: An external HITRUST assessor will review your controls to make sure they pass HITRUST’s prescribed thresholds
- Quality assurance: If the validated assessment is successful, HITRUST’s QA analyst will perform the final review and provide feedback with remediation tasks if necessary
- Deliverable preparation and reviews: Upon successful completion of the assessment process, you’ll receive a report draft you can review within 30 days, after which you’ll get the final report
Should you adopt HITRUST or ISO 27001?
HITRUST CSF and ISO 27001 are complementary frameworks, which means you don’t have to choose between them. Ideally, you should aim to implement both to ensure robust security and privacy, especially if you want to improve client trust. If resources are a constraint, you can implement either framework and work toward incorporating the other over time.
As the HITRUST CSF directly maps to ISO 27001 and 50+ other frameworks, starting with it makes more sense than doing the opposite. Once you obtain a HITRUST certificate, you’ll have a solid foundation for ISO 27001 compliance. Plus, you can potentially meet additional regulatory obligations more efficiently.
A HITRUST certificate also serves as proof of a strong security posture, making it easier to build trust with prospects. You can considerably expedite any procurement process by shortening the cycle of extensive security reviews and questionnaires.
Regardless of your chosen framework, consider using process automation to fast-track ISO 27001 or HITRUST compliance tasks. Both frameworks can be quite extensive, and automation software ensures tasks like evidence gathering and control monitoring are less stressful for security teams.
{{cta_testimonial11="/cta-modules"}} | US Med-Equip Customer Story
Fast-track HITRUST and ISO 27001 compliance with Vanta
Vanta is an end-to-end trust management platform that automates up to +50% of compliance requirements for numerous standards—including HITRUST and ISO 27001. It’s also HITRUST’s official automation partner, which makes it an excellent choice for organizations that want to get certified smoothly.
The platform offers a comprehensive HITRUST CSF product equipped with various workflow resources and automation features, most notably:
- Automated gap assessment against numerous regulations and standards
- Centralized documentation and tracking of the certification process
- Automated evidence collection that streamlines disparate systems
- Over 350 integrations with major platforms (cloud providers, CRM systems, etc.)
- MyCSF integration to enable smooth evidence sharing
Vanta also offers a ISO 27001 solution, which streamlines the compliance process through features like automated access reviews and vulnerability management.
Schedule a custom demo today and let Vanta experts help you explore solutions tailored to your organization.
{{cta_simple16="/cta-modules"}} | HITRUST product page
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
| Role: | GRC responsibilities: |
|---|---|
| Board of directors | Central to the overarching GRC strategy, this group sets the direction for the compliance strategy. They determine which standards and regulations are necessary for compliance and align the GRC strategy with business objectives. |
| Chief financial officer | Primary responsibility for the success of the GRC program and for reporting results to the board. |
| Operations managers from relevant departments | This group owns processes. They are responsible for the success and direction of risk management and compliance within their departments. |
| Representatives from relevant departments | These are the activity owners. These team members are responsible for carrying out specific compliance and risk management tasks within their departments and for integrating these tasks into their workflows. |
| Contract managers from relevant department | These team members are responsible for managing interactions with vendors and other third parties in their department to ensure all risk management and compliance measures are being taken. |
| Chief information security officer (CISO) | Defines the organization’s information security policy, designs risk and vulnerability assessments, and develops information security policies. |
| Data protection officer (DPO) or legal counsel | Develops goals for data privacy based on legal regulations and other compliance needs, designs and implements privacy policies and practices, and assesses these practices for effectiveness. |
| GRC lead | Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the organization’s library of security controls. |
| Cybersecurity analyst(s) | Implements and monitors cybersecurity measures that are in line with the GRC program and business objectives. |
| Compliance analyst(s) | Monitors the organization’s compliance with all regulations and standards necessary, identifies any compliance gaps, and works to mitigate them. |
| Risk analyst(s) | Carries out the risk management program for the organization and serves as a resource for risk management across various departments, including identifying, mitigating, and monitoring risks. |
| IT security specialist(s) | Implements security controls within the IT system in coordination with the cybersecurity analyst(s). |
