CCSFP 무료 덤프문제 온라인 액세스

What frameworks are the HITRUST CSF built upon? (Select all that apply) [0005] NIST SP 800-53

• A.NIST SP 800-37 Rev 1
• B.HIPAA Omnibus Rule
• C.ISO 27001/2
• D.ISO 27799

An assessed entity is required to comply with six regulatory factors. Must the entity include all six regulatory factors in the scope of their assessment? [0088]

• A.No
• B.Yes

During a HITRUST Assessment, what percentage of External Assessor hours must be performed by a CCSFP?

• A.No formal standard
• B.30%
• C.50%
• D.100%

A HITRUST certification is issued for all e1, i1 and r2 validated assessments. [0022]

• A.True
• B.False

A hospital system based in both Texas and Massachusetts processes credit card data within its scoped environment. Management has asked that all relevant regulatory factors be included in the r2 assessment.
Which of the following regulatory requirements should be selected? (Select all that apply) [0013]

• A.Texas Health and Safety Code
• B.Singapore Personal Data Act
• C.State of Nevada Security of Personal Information Requirements
• D.PCI-DSS
• E.State of Massachusetts Data Protection Act