Businesses today operate in a highly digital-first space, where they are held accountable for protecting sensitive data and upholding privacy standards.
HITRUST CSF and SOC 2 stand out as two authoritative, industry-accepted security and privacy frameworks that help organizations demonstrate trustworthiness to their stakeholders. The strict guidelines and requirements of these frameworks help you fortify your security posture and avoid major regulatory disruptions.
While the two frameworks share the common goal of ensuring a more secure and transparent IT environment, they come with notable differences you may want to familiarize yourself with. The idea is to understand which option caters to your compliance and industry needs better.
Our HITRUST vs. SOC 2 comparison explores all the nuanced distinctions between these frameworks. We’ll also discuss a potential strategy to implement either or both options harmoniously.
SOC 2 at a glance
SOC 2 is an elaborate framework designed mainly for service organizations that want an industry-standard set of guidelines—the Trust Services Criteria (TSC)—for improving their security and privacy practices. It’s not mandatory and mainly focuses on controls for improving cybersecurity for organizations that offer cloud-based services or operate in tech-driven sectors.
Companies adopt SOC 2 for its numerous benefits, such as:
- Visibility into an organization’s cybersecurity standing: SOC 2 audits are an excellent way to understand your security posture and program maturity so that you can plan for the necessary changes and control upgrades
- Data-driven security investments: Determining the return on security investments can be challenging, and SOC 2 can be the source of robust data you can use to identify and invest in impactful controls and processes
- Enhanced trust and transparency: A SOC 2 report is an excellent way to demonstrate trust to stakeholders and foster a more security-aware business environment, as well as facilitate transparent agreements for SaaS and IT services
Bonus: Explore our SOC 2 Collection to find useful compliance resources.
{{cta_withimage1="/cta-modules"}} | SOC 2 compliance checklist
HITRUST CSF at a glance
Compared to SOC 2, HITRUST CSF is a more comprehensive security framework that helps organizations implement robust security controls and manage risks and vulnerabilities in highly regulated industries, including healthcare, finance, and technology. HITRUST requirements integrate 50+ standards and regulations—including SOC 2.
The framework offers three certification levels, each requiring a different number of security controls, which makes HITRUST a flexible and adaptable framework for organizations of various sizes. It offers many scale-friendly benefits you can’t get with individual frameworks, most notably:
- Harmonization of over 50 authoritative sources: The HITRUST CSF simplifies compliance with numerous standards and regulations besides SOC 2, helping your organization operate in complex regulatory sectors with ease
- Prescriptive compliance guidance: Unlike many frameworks and standards that provide interpretive, difficult-to-follow rules, the HITRUST CSF offers clear, prescriptive guidance through specific controls, ensuring a smooth compliance process without guesswork
- Evolving security and risk coverage: The framework continuously evolves to address emerging security risks with corresponding controls, alleviating some of the burden on security teams
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
4 main differences between the HITRUST CSF and SOC 2
Despite their shared overarching goal, HITRUST CSF and SOC 2 differ in four noteworthy aspects:
- Type of verification
- Scope of security practices
- Applicability
- Mappings and overlaps
Let’s explore each difference in further detail below.
1. Type of verification
HITRUST CSF is a third-party certifiable framework, while SOC 2 calls for an attestation process by licensed firms or certified public accountants (CPAs).
To get HITRUST-certified, you need to pass the HITRUST audit conducted by an authorized external assessor. Based on your organization’s size, resources, and security program maturity, you can choose from the following three certification levels:
The breadth of HITRUST verification processes will be informed by your chosen certification level.
SOC 2, on the other hand, involves an attestation process that validates an organization’s adherence to these five TSCs:
- Security
- Availability
- Processing integrity
- Confidentiality
- Privacy
Only the Security criterion is mandatory for SOC 2 attestation—you can report on the remaining TSCs based on their applicability to your organization. A SOC 2 report can be generated by an authorized third-party CPA who attests to the effectiveness of your controls and their alignment with SOC 2 guidelines.
2. Scope of security practices
SOC 2 has a narrower scope compared to HITRUST as its controls are limited and only related to the TSCs. If you look at HITRUST, though, you’ll see that it has a much broader scope as it implements and harmonizes 50+ authoritative frameworks and standards. As such, it’s highly useful for any organization that needs to mature or overhaul its security program.
The general structure of the HITRUST CSF (as of November 2024) is as follows:
- 14 control categories
- 49 control objectives
- 156 control references
- 2,600+ requirement statements
Additionally, the framework features 19 security domains for comprehensive coverage of controls:
- Information Protection Program
- Endpoint Protection
- Portable Media Security
- Mobile Device Security
- Wireless Security
- Configuration Management
- Vulnerability Management
- Network Protection
- Transmission Protection
- Password Management
- Access Control
- Audit Logging & Monitoring
- Education, Training and Awareness
- Third Party Assurance
- Incident Management
- Business Continuity & Disaster Recovery
- Risk Management
- Physical & Environmental Security
- Data Protection & Privacy
With the framework’s elaborate scope and clear structure, it’s easier for security teams in any industry to scope out controls, conduct a gap analysis, and take precise measures to achieve HITRUST compliance.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Applicability
HITRUST initially designed its CSF for healthcare organizations, but the framework has now evolved to support compliance workflows in most industries. It’s especially useful for heavily regulated industries like finance, where organizations handle complex standards and regulations across different geographical locations.
SOC 2’s audience, on the other hand, includes service organizations, as well as their business partners and auditors—it’s agnostic to an organization’s industry and applicable to any service organization that hosts data on the cloud.
Neither SOC 2 nor the HITRUST CSF is mandatory for any of the target organizations. Both are third-party frameworks you can adopt at your discretion, so you won’t face any legal consequences if you don’t implement them.
However, following either of these frameworks might be necessary if you want to demonstrate secure handling of client data. Many SLAs even include SOC 2 or similar attestations as part of contractual obligations.
4. Mappings and overlaps
The idea behind mappings and overlaps is to determine if adopting either SOC 2 or HITRUST can help you comply with other standards or mandatory regulations applicable to your industry.
As far as SOC 2 is concerned, its TSCs can be mapped to several other standards and regulations, such as:
A SOC 2 attestation will help your organization get closer to complying with the above regulations and frameworks.
Seeing as HITRUST encompasses considerably more controls, it also maps to more standards and regulations than SOC 2. Some of the most notable ones include the following:
- GDPR
- HITECH
- COBIT 5
- CCPA
- PCI/DSS
If you’re considering a security framework mainly to simplify compliance with other authoritative sources, HITRUST might be the superior choice. This is especially true if you opt for r2 certification that ensures a wide assessment scope and encompasses controls relevant to your risk profile.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
Should you implement SOC 2 or HITRUST CSF—or both?
SOC 2 and the HITRUST CSF aren’t mutually exclusive—they can be implemented in conjunction, especially if you’re looking to mature your security program and accelerate growth.
Today, SOC 2 is one of the most requested independent third-party security assessments, so it’s an essential component of doing business in most sectors. However, organizations looking for a more comprehensive security framework often find value in prioritizing the HITRUST CSF.
Once you obtain HITRUST certification, you’ll get a head start for SOC 2 implementation due to HITRUST’s mappings to the framework. You will also get a somewhat solid foundation for compliance with many other regulations and standards, which can further optimize the resources you spend on implementing overlapping controls.
Regardless of which framework you follow, you should be prepared to tackle repetitive compliance tasks with efficiency. It’s common for growing organizations to find themselves losing resources on unoptimized processes, such as:
- Slow and scattered evidence collection
- Inefficient or delayed security reviews, especially during deal cycles
- Disparate control monitoring processes
If your security workflows are bogged down by manual work, both SOC 2 and HITRUST certification cycles can become lengthy. The best practice here is to have an automated compliance solution like Vanta to ensure resource-efficient security workflows.
Pursue HITRUST and SOC 2 compliance with Vanta
Vanta is a comprehensive trust management platform that supports organizations of any size on their journey to solidify and demonstrate their security and compliance posture. It automates up to +50% of workflows for various major standards, including HITRUST and SOC 2.
As HITRUST’s official automation partner, Vanta can considerably simplify and expedite the certification process. Its dedicated HITRUST CSF product comes with curated features that streamline your tasks, such as:
- Automated gap assessments: Vanta automatically cross-references your controls with major standards and regulations to identify overlaps you can use.
- Streamlined evidence collection: With Vanta, you can gather evidence without manual workflows, thanks to the platform’s integration with over 375 platforms. Vanta also integrates with MyCSF, HITRUST’s compliance portal, which makes evidence submission easier.
- Centralized HITRUST tracking: Vanta unifies HITRUST requirements and certification progress data to help your team achieve compliance in a systematic manner.
Vanta offers supports all major compliance frameworks, including SOC 2, to help fast-track different compliance workflows. The platform can also connect you with compliance experts via its service partner network.
If you want to see the platform in action, schedule a custom HITRUST CSF demo for your team.
{{cta_simple16="/cta-modules"}} | HITRUST product page
Additional resources
HITRUST and SOC 2: Which framework fits your needs?
Additional resources
Businesses today operate in a highly digital-first space, where they are held accountable for protecting sensitive data and upholding privacy standards.
HITRUST CSF and SOC 2 stand out as two authoritative, industry-accepted security and privacy frameworks that help organizations demonstrate trustworthiness to their stakeholders. The strict guidelines and requirements of these frameworks help you fortify your security posture and avoid major regulatory disruptions.
While the two frameworks share the common goal of ensuring a more secure and transparent IT environment, they come with notable differences you may want to familiarize yourself with. The idea is to understand which option caters to your compliance and industry needs better.
Our HITRUST vs. SOC 2 comparison explores all the nuanced distinctions between these frameworks. We’ll also discuss a potential strategy to implement either or both options harmoniously.
SOC 2 at a glance
SOC 2 is an elaborate framework designed mainly for service organizations that want an industry-standard set of guidelines—the Trust Services Criteria (TSC)—for improving their security and privacy practices. It’s not mandatory and mainly focuses on controls for improving cybersecurity for organizations that offer cloud-based services or operate in tech-driven sectors.
Companies adopt SOC 2 for its numerous benefits, such as:
- Visibility into an organization’s cybersecurity standing: SOC 2 audits are an excellent way to understand your security posture and program maturity so that you can plan for the necessary changes and control upgrades
- Data-driven security investments: Determining the return on security investments can be challenging, and SOC 2 can be the source of robust data you can use to identify and invest in impactful controls and processes
- Enhanced trust and transparency: A SOC 2 report is an excellent way to demonstrate trust to stakeholders and foster a more security-aware business environment, as well as facilitate transparent agreements for SaaS and IT services
Bonus: Explore our SOC 2 Collection to find useful compliance resources.
{{cta_withimage1="/cta-modules"}} | SOC 2 compliance checklist
HITRUST CSF at a glance
Compared to SOC 2, HITRUST CSF is a more comprehensive security framework that helps organizations implement robust security controls and manage risks and vulnerabilities in highly regulated industries, including healthcare, finance, and technology. HITRUST requirements integrate 50+ standards and regulations—including SOC 2.
The framework offers three certification levels, each requiring a different number of security controls, which makes HITRUST a flexible and adaptable framework for organizations of various sizes. It offers many scale-friendly benefits you can’t get with individual frameworks, most notably:
- Harmonization of over 50 authoritative sources: The HITRUST CSF simplifies compliance with numerous standards and regulations besides SOC 2, helping your organization operate in complex regulatory sectors with ease
- Prescriptive compliance guidance: Unlike many frameworks and standards that provide interpretive, difficult-to-follow rules, the HITRUST CSF offers clear, prescriptive guidance through specific controls, ensuring a smooth compliance process without guesswork
- Evolving security and risk coverage: The framework continuously evolves to address emerging security risks with corresponding controls, alleviating some of the burden on security teams
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
4 main differences between the HITRUST CSF and SOC 2
Despite their shared overarching goal, HITRUST CSF and SOC 2 differ in four noteworthy aspects:
- Type of verification
- Scope of security practices
- Applicability
- Mappings and overlaps
Let’s explore each difference in further detail below.
1. Type of verification
HITRUST CSF is a third-party certifiable framework, while SOC 2 calls for an attestation process by licensed firms or certified public accountants (CPAs).
To get HITRUST-certified, you need to pass the HITRUST audit conducted by an authorized external assessor. Based on your organization’s size, resources, and security program maturity, you can choose from the following three certification levels:
The breadth of HITRUST verification processes will be informed by your chosen certification level.
SOC 2, on the other hand, involves an attestation process that validates an organization’s adherence to these five TSCs:
- Security
- Availability
- Processing integrity
- Confidentiality
- Privacy
Only the Security criterion is mandatory for SOC 2 attestation—you can report on the remaining TSCs based on their applicability to your organization. A SOC 2 report can be generated by an authorized third-party CPA who attests to the effectiveness of your controls and their alignment with SOC 2 guidelines.
2. Scope of security practices
SOC 2 has a narrower scope compared to HITRUST as its controls are limited and only related to the TSCs. If you look at HITRUST, though, you’ll see that it has a much broader scope as it implements and harmonizes 50+ authoritative frameworks and standards. As such, it’s highly useful for any organization that needs to mature or overhaul its security program.
The general structure of the HITRUST CSF (as of November 2024) is as follows:
- 14 control categories
- 49 control objectives
- 156 control references
- 2,600+ requirement statements
Additionally, the framework features 19 security domains for comprehensive coverage of controls:
- Information Protection Program
- Endpoint Protection
- Portable Media Security
- Mobile Device Security
- Wireless Security
- Configuration Management
- Vulnerability Management
- Network Protection
- Transmission Protection
- Password Management
- Access Control
- Audit Logging & Monitoring
- Education, Training and Awareness
- Third Party Assurance
- Incident Management
- Business Continuity & Disaster Recovery
- Risk Management
- Physical & Environmental Security
- Data Protection & Privacy
With the framework’s elaborate scope and clear structure, it’s easier for security teams in any industry to scope out controls, conduct a gap analysis, and take precise measures to achieve HITRUST compliance.
{{cta_webinar3="/cta-modules"}} | Choosing the right HITRUST certification level and streamlining implementation
3. Applicability
HITRUST initially designed its CSF for healthcare organizations, but the framework has now evolved to support compliance workflows in most industries. It’s especially useful for heavily regulated industries like finance, where organizations handle complex standards and regulations across different geographical locations.
SOC 2’s audience, on the other hand, includes service organizations, as well as their business partners and auditors—it’s agnostic to an organization’s industry and applicable to any service organization that hosts data on the cloud.
Neither SOC 2 nor the HITRUST CSF is mandatory for any of the target organizations. Both are third-party frameworks you can adopt at your discretion, so you won’t face any legal consequences if you don’t implement them.
However, following either of these frameworks might be necessary if you want to demonstrate secure handling of client data. Many SLAs even include SOC 2 or similar attestations as part of contractual obligations.
4. Mappings and overlaps
The idea behind mappings and overlaps is to determine if adopting either SOC 2 or HITRUST can help you comply with other standards or mandatory regulations applicable to your industry.
As far as SOC 2 is concerned, its TSCs can be mapped to several other standards and regulations, such as:
A SOC 2 attestation will help your organization get closer to complying with the above regulations and frameworks.
Seeing as HITRUST encompasses considerably more controls, it also maps to more standards and regulations than SOC 2. Some of the most notable ones include the following:
- GDPR
- HITECH
- COBIT 5
- CCPA
- PCI/DSS
If you’re considering a security framework mainly to simplify compliance with other authoritative sources, HITRUST might be the superior choice. This is especially true if you opt for r2 certification that ensures a wide assessment scope and encompasses controls relevant to your risk profile.
{{cta_withimage19="/cta-modules"}} | HITRUST Compliance Checklist
Should you implement SOC 2 or HITRUST CSF—or both?
SOC 2 and the HITRUST CSF aren’t mutually exclusive—they can be implemented in conjunction, especially if you’re looking to mature your security program and accelerate growth.
Today, SOC 2 is one of the most requested independent third-party security assessments, so it’s an essential component of doing business in most sectors. However, organizations looking for a more comprehensive security framework often find value in prioritizing the HITRUST CSF.
Once you obtain HITRUST certification, you’ll get a head start for SOC 2 implementation due to HITRUST’s mappings to the framework. You will also get a somewhat solid foundation for compliance with many other regulations and standards, which can further optimize the resources you spend on implementing overlapping controls.
Regardless of which framework you follow, you should be prepared to tackle repetitive compliance tasks with efficiency. It’s common for growing organizations to find themselves losing resources on unoptimized processes, such as:
- Slow and scattered evidence collection
- Inefficient or delayed security reviews, especially during deal cycles
- Disparate control monitoring processes
If your security workflows are bogged down by manual work, both SOC 2 and HITRUST certification cycles can become lengthy. The best practice here is to have an automated compliance solution like Vanta to ensure resource-efficient security workflows.
Pursue HITRUST and SOC 2 compliance with Vanta
Vanta is a comprehensive trust management platform that supports organizations of any size on their journey to solidify and demonstrate their security and compliance posture. It automates up to +50% of workflows for various major standards, including HITRUST and SOC 2.
As HITRUST’s official automation partner, Vanta can considerably simplify and expedite the certification process. Its dedicated HITRUST CSF product comes with curated features that streamline your tasks, such as:
- Automated gap assessments: Vanta automatically cross-references your controls with major standards and regulations to identify overlaps you can use.
- Streamlined evidence collection: With Vanta, you can gather evidence without manual workflows, thanks to the platform’s integration with over 375 platforms. Vanta also integrates with MyCSF, HITRUST’s compliance portal, which makes evidence submission easier.
- Centralized HITRUST tracking: Vanta unifies HITRUST requirements and certification progress data to help your team achieve compliance in a systematic manner.
Vanta offers supports all major compliance frameworks, including SOC 2, to help fast-track different compliance workflows. The platform can also connect you with compliance experts via its service partner network.
If you want to see the platform in action, schedule a custom HITRUST CSF demo for your team.
{{cta_simple16="/cta-modules"}} | HITRUST product page
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
What’s a Rich Text element?
What’s a Rich Text element?The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.
The rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.Static and dynamic content editing
Static and dynamic content editingA rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!
A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!How to customize formatting for each rich text
How to customize formatting for each rich textHeadings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.
Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
| Role: | GRC responsibilities: |
|---|---|
| Board of directors | Central to the overarching GRC strategy, this group sets the direction for the compliance strategy. They determine which standards and regulations are necessary for compliance and align the GRC strategy with business objectives. |
| Chief financial officer | Primary responsibility for the success of the GRC program and for reporting results to the board. |
| Operations managers from relevant departments | This group owns processes. They are responsible for the success and direction of risk management and compliance within their departments. |
| Representatives from relevant departments | These are the activity owners. These team members are responsible for carrying out specific compliance and risk management tasks within their departments and for integrating these tasks into their workflows. |
| Contract managers from relevant department | These team members are responsible for managing interactions with vendors and other third parties in their department to ensure all risk management and compliance measures are being taken. |
| Chief information security officer (CISO) | Defines the organization’s information security policy, designs risk and vulnerability assessments, and develops information security policies. |
| Data protection officer (DPO) or legal counsel | Develops goals for data privacy based on legal regulations and other compliance needs, designs and implements privacy policies and practices, and assesses these practices for effectiveness. |
| GRC lead | Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the organization’s library of security controls. |
| Cybersecurity analyst(s) | Implements and monitors cybersecurity measures that are in line with the GRC program and business objectives. |
| Compliance analyst(s) | Monitors the organization’s compliance with all regulations and standards necessary, identifies any compliance gaps, and works to mitigate them. |
| Risk analyst(s) | Carries out the risk management program for the organization and serves as a resource for risk management across various departments, including identifying, mitigating, and monitoring risks. |
| IT security specialist(s) | Implements security controls within the IT system in coordination with the cybersecurity analyst(s). |
