ChaptersCircleEventsBlog
Join us for the in-person CCSK Azure course at Black Hat from August 4–5! Register now for a hands-on deep dive and secure your spot now!
Research Publications currently filtered by Term.
×

Download Publication

Information Technology Governance, Risk, and Compliance in Healthcare v2
Information Technology Governance, Risk, and Compliance in Healthcare v2
Who it's for:
  • Healthcare Executives and IT Professionals
  • Healthcare AI Developers
  • IT Governance and Compliance Officers
  • Risk Managers
  • Regulatory Compliance Experts
  • Policymakers

Information Technology Governance, Risk, and Compliance in Healthcare v2

Release Date: 05/28/2024

Healthcare organizations are increasingly using cloud services. However, the transition to the cloud presents many Governance, Risk, and Compliance (GRC) challenges. Healthcare organizations must address these challenges to ensure that they can reap the benefits of cloud computing. Designing and implementing a robust cloud GRC program enables healthcare organizations to:
  • More effectively manage risk
  • Gather and report on important risk data
  • Eliminate duplicate efforts of staff members
  • Implement automation
  • Ensure compliance with laws and regulations such as HIPAA

This publication describes the elements of an effective cloud healthcare GRC program. Professionals from any type of organization will find numerous actionable insights to apply to their own GRC endeavors.

Key Takeaways: 
  • Essential elements of a cloud healthcare GRC program
  • The rising importance of AI GRC
  • How to adapt governance procedures for cloud computing
  • The cloud computing governance lifecycle
  • Risk management complexities for healthcare organizations
  • How to conduct risk assessments for a cloud platform
  • Common frameworks and standards for healthcare GRC
Download this Resource

Bookmark
Share
Related resources
Zero Trust Automation & Orchestration and Visibility & Analytics Overview
Zero Trust Automation & Orchestration and Visib...
Zero Trust Guidance for IoT
Zero Trust Guidance for IoT
State of SaaS Security Report 2025
State of SaaS Security Report 2025
What Kind of Identity Should Your AI Agent Have?
What Kind of Identity Should Your AI Agent Have?
Published: 06/25/2025
ESXi Ransomware: The Growing Threat to Virtualized Environments
ESXi Ransomware: The Growing Threat to Virtualized Environments
Published: 06/25/2025
6 Cloud Security Trends Reshaping Risk and Resilience Strategies
6 Cloud Security Trends Reshaping Risk and Resilience Strategies
Published: 06/20/2025
How to Keep IAM Running in a Multi-Cloud World
How to Keep IAM Running in a Multi-Cloud World
Published: 06/18/2025

Acknowledgements

Dr. Jim Angle
Dr. Jim Angle

Dr. Jim Angle

Jim has dedicated hundreds of hours to CSA and was instrumental in reviving CSA’s Health Information Management working group. In doing so, he drafted the group’s first charter and went on to become its co-chair. In this role, he authored three papers — Managing the Risk for Medical Devices Connected to the Cloud, Telehealth in the ...

Read more

Alex Kaluza
Alex Kaluza
Research Analyst, CSA

Alex Kaluza

Research Analyst, CSA

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.

He has co-chaired...

Read more

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training