Re: HIPAA and NIST 171 Crosswalk Mapping

[Rob Milman <rob.milman () SAIT CA>]

Our athletics and recreation department created an esports league on their own without our involvement or consultation. 
Sigh.


[cid:image004.png@01D18F19.9217E950]
Rob Milman
Associate Director, Information Security
Information Technology Services

Southern Alberta Institute of Technology
EH Crandell Building, GA 214
1301 – 16 Avenue NW, Calgary AB, T2M 0L4

(Office) 403.774.5401  (Cell) 403.606.3173
rob.milman () sait ca<mailto:rob.milman () sait ca>




From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Dewight Fredrick 
Kramer
Sent: Wednesday, October 16, 2019 2:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] HIPAA and NIST 171 Crosswalk Mapping

Hello,

I have been asked to developed a HIPAA – NISTSP 800-171 crosswalk for the controls that are required.  I did a quick 
google search and did not find any direct mapping but I did see a possible path forward with using the NISTSP 800-66  
and NIST SP800-171 and how they both map to NIST SP 800-53.  Before I endeavor on this task, I am reaching out to this 
group to see if anyone has already created such a mapping or knows of one.  This would save many hours!

Thank you,


Dewight F. Kramer
Assistant CISO
University of California, Davis
One Shields Avenue
Davis, CA 95616
(530)752-1700
dfkramer () ucdavis edu<mailto:dfkramer () ucdavis edu>
http://security.ucdavis.edu<http://security.ucdavis.edu/>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community