Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » HiTRUST » HITRUST Inheritance Program

HITRUST Inheritance Program

The HITRUST Inheritance Program lets organizations rely on shared security controls provided by internal IT services or external third parties, like service providers, vendors, cloud platforms (SaaS, IaaS/PaaS), colocation data centers, and other managed services.

For example, if you’re using Salesforce, the HITRUST Inheritance Program allows you to incorporate the controls Salesforce uses into your audits and assessments. 

This means you don’t have to review Salesforce’s audit reports individually. Instead, your assessor can rely on the fact that Salesforce has already met the required testing for those controls and their HITRUST assessor has reviewed everything. It simplifies the process and saves time while ensuring compliance.

Now, here’s how you can use HITRUST Inheritance:

  • External Inheritance:  You can adopt up to 85% of the control testing scores from HITRUST-certified third-party Cloud Service Providers (CSPs). 
  • Internal Inheritance: You can also inherit results from your organization’s assessments, but this feature is available only with Corporate and Premium subscriptions.

This makes it easier to leverage existing compliance work and streamline your own assessments.

Additional reading

When Crisis Strikes, Be Ready: Creating a Business Continuity Policy That Works

TL;DR A Business Continuity Policy (BCP) is yourorganization’s resilience blueprint. It outlines strategies to maintain critical operations during disruptions, from cyber attacks to natural disasters. Effective BCPs are built on thorough risk assessment and business impact analysis. They prioritize critical functions, set recovery objectives, and allocate resources strategically. Crafted effectively, a BCP can provide an…

What Is Penetration Testing as a Service (PTaaS)?

TL,DR: PTaaS combines human-led penetration testing with automation, cloud delivery, and real-time reporting. It replaces one-off reports with more continuous testing across changing attack surfaces. The article covers PTaaS benefits for remediation speed, cost control, compliance evidence, and expert validation. Security audits demand proof of resilience. Compliance frameworks expect validation of controls. Customers and regulators…

Rethinking Trust: How Zero Trust Architecture Redefines Cybersecurity

TL,DR: Zero Trust Architecture (ZTA) eliminates implicit trust by continuously verifying users, devices, and applications, enforcing least privilege access, and dynamically restricting access to critical assets regardless of network location Implementation follows a phased approach: start with identity and access management, introduce software-defined perimeters, enforce micro-segmentation to contain breaches within isolated zones, and automate policies…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.

Contact sales