What Control Framework are you using?

[David Clift <David.Clift () UTAH EDU>]

I would like to get an idea of what control frameworks are being used by academic institutions, especially those 
organizations that also have a health care function and are affected by HIPAA / HITECH regulations.  I am currently 
evaluating the NIST, HITRUST CSF, and ISO frameworks and would appreciate hearing feedback from other organizations on 
the positives and negatives of each of those.  Is one more popular or better suited to academic / health care 
organizations?

You are welcome to respond back to me directly with any feedback you have.

Thanks,
David

________________________________________
David Clift
University of Utah
Information Security and Privacy Office
650 Komas Drive, Suite 102
Salt Lake City, UT 84108

Office: 801.587.6198
Cell: 408.836.4611
David.Clift () utah edu