The managed principle rates whether an organization actively governs and improves cybersecurity practices by updating policies, procedures, and control implementation based on measurements. section 1.5.1
Within the HITRUST control-rating model, managed follows measurement:
- Measured assesses the effectiveness of cybersecurity controls through regular metrics. section 1.5.1
- Managed uses those measurements to support continued improvement and align cybersecurity practices with organizational risk. section 1.5.1
- The principle contributes to a control statement’s overall maturity and comprehensiveness rating. section 1.5.1
Figure 1.2 HITRUST scoring criterion by percentage. The percentages indicate the weights placed on each category for scoring purposes.
Use the scoring criterion to see how managed relates to policy, procedure, implementation, and measurement in HITRUST assessments. section 1.5.1
