Download Publication

Who it's for:
- Healthcare Executives and IT Professionals
- Healthcare AI Developers
- IT Governance and Compliance Officers
- Risk Managers
- Regulatory Compliance Experts
- Policymakers
Information Technology Governance, Risk, and Compliance in Healthcare v2
Release Date: 05/28/2024
Working Group: Health Information Management
- More effectively manage risk
- Gather and report on important risk data
- Eliminate duplicate efforts of staff members
- Implement automation
- Ensure compliance with laws and regulations such as HIPAA
- Essential elements of a cloud healthcare GRC program
- The rising importance of AI GRC
- How to adapt governance procedures for cloud computing
- The cloud computing governance lifecycle
- Risk management complexities for healthcare organizations
- How to conduct risk assessments for a cloud platform
- Common frameworks and standards for healthcare GRC
Download this Resource
Related Resources
Acknowledgements

Dr. Jim Angle
Jim has dedicated hundreds of hours to CSA and was instrumental in reviving CSA’s Health Information Management working group. In doing so, he drafted the group’s first charter and went on to become its co-chair. In this role, he authored three papers — Managing the Risk for Medical Devices Connected to the Cloud, Telehealth in the ...

Alex Kaluza
Research Analyst, CSA

Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.
He has co-chaired...
Interested in helping develop research with CSA?
Related Certificates & Training

Learn more