HITRUST SHARED RESPONSIBILITY MATRIX

Development of voluntary standards for all industries in the field of information security, privacy, risk management and compliance with a framework for distributing, partitioning or relying upon information technology control obligations for cloud computing services and other external third-party technology service providers; Software as a service (SaaS) services featuring software in the field of information security, privacy, risk management and compliance with a framework for distributing, partitioning or relying upon information technology control obligations for cloud computing services and other external third-party technology service providers