| Trustmark Definition Name | Version |
|---|---|
|
Addresses the requirement for distribution of self-signed PKI Certificate Authority certificates.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation and approval of deviations from defined configuration settings as related to overall configuration management requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of actions not requiring identification or authentication as related to overall access control requirements.
|
1.0 |
|
This Trustmark Definition defines conformance and assessment criteria for compliance requirements to document audit review actions.
|
1.0 |
|
Addresses requirements for documentation of personnel training.
|
1.0 |
|
Addresses the requirement for organizations to document duties and procedures for PKI Trusted Roles.
|
1.0 |
|
Addresses the requirement for organizations to provide documentation of duties and procedures for PKI Trusted Roles to personnel filling those roles.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of individuals' basic security awareness training as related to overall awareness and training requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of individuals' specific information system security training as related to overall awareness and training requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of internal connections as related to overall certification accreditation and security assessments requirements.
|
1.0 |
|
Addresses the requirement for the documentation of PKI CA Key Pair Generation procedures to be detailed enough to show that appropriate role separation was used.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of prohibited and-or restricted configuration items as related to overall configuration management requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documentation of system maintenance as related to overall maintenance requirements.
|
1.0 |
|
Addresses requirements for documentation of personnel training.
|
1.0 |
|
Specifies that a health care provider organization must maintain a written or electronic record of any required action, activity, or designation.
|
1.0 |
|
Specifies that a health care provider organization must maintain required written communication, or an electronic copy, as documentation.
|
1.0 |
|
Specifies that a health care provider organization must maintain the policies and procedures and privacy notice in written or electronic form.
|
1.0 |
|
Specifies that a health care provider organization must maintain documentation sufficient to meet its burden of proof to demonstrate that all required notifications were made in the event of a data breach.
|
1.0 |
|
Specifies that a health care provider organization must retain the policy and procedure and privacy notice documentation for six years.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documented access agreements as related to overall personnel security requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documented access control policy as related to overall access control requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documented access control procedures as related to overall access control requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documented audit and accountability policy as related to overall audit and accountability requirements.
|
1.0 |
|
Defines conformance and assessment criteria for compliance with minimum security requirements for documented audit and accountability procedures as related to overall audit and accountability requirements.
|
1.0 |
|
Defines conformance and assessment criteria for verifying that an organization have a documented authentication strategy.
|
1.0 |
