Educause Security Discussion mailing list archives

Re: HIPAA and NIST 171 Crosswalk Mapping


From: "George J. Silowash" <gsilowas () NORWICH EDU>
Date: Thu, 17 Oct 2019 12:05:28 +0000

Hi Dewight,

You may want to look at the HHS document, "HIPAA Security Rule Crosswalk to NIST Cybersecurity Framework," available 
from https://www.hhs.gov/sites/default/files/nist-csf-to-hipaa-security-rule-crosswalk-02-22-2016-final.pdf.

This maps the HIPAA standards to various controls, including COBIT, ISO27001, NIST 800-53 etc. The 800-171 document 
availabe from https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r1.pdf, Appendix D maps 800-171 to 
800-53. It may take a little work to get what you are looking for, but this may help with that.

V/R,
George

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: