Dear members,
CSA is interested in collaborating with HITRUST on a mapping exercise between CCM V4 and HITUST CSF used in healthcare industry.
HITRUST team conducted a first mapping and is looking to have it reviewed by the CCM WG. The existence of a mapping should significantly reduce the effort and time needed to complete this task. Experts need to have substantial -documented- experience in CCM-based implementations and assessments and WG mappings.
The timeline is somewhat tight. We are expected to deliver this review by end of September.
I am looking at putting together a small task force (e.g., up to 5 experts) to work methodically on this in the next 2 months. Reaching out to this group first.
We are expected to start mid next week. Meetings cadence is most likely going to be on a weekly basis, 1h call.
Please contact me if you are interested and have some bandwidth to help us out.
------------------------------
[Lefteris] [Skoutaris]
[Cloud Controls Matrix, Program Manager]
[Cloud Security Alliance]
------------------------------