HITRUST intros new security model for cloud service providers

HITRUST has launched it new HITRUST Shared Responsibility Program and Matrix Version 1.0, which it touts as the first common model for managing and communication privacy and security responsibilities between cloud service providers and their customers. The new Matrix approach aims to clarify the roles and responsibilities regarding ownership and operation of security controls, according to HITRUST automating and streamlining the assurance process when privacy and security controls are shared or inherited.It's part of HITRUST's Shared Responsibility Program, which was launched to address the growing misunderstandings, risks, and complexities when working with service providers.The program is supported by a working group comprising representatives from Armor, AWS, Google, Microsoft Azure and Salesforce, as well as enterprise cloud customers, cloud professional services firms, and solution providers.HITRUST says healthcare organizations will benefit from streamlined communication processes as well as reduced inefficiencies and burdens of compliance when leveraging services from cloud providers.