Every CUBE control mapped across five compliance frameworks. Single source of truth for auditors, procurement teams, and compliance officers.
12
Total Controls
10
Control Categories
5
Mapped Frameworks
100%
Controls Effective
| Control ID | Description | HIPAA | ISO 27001 | SOC 2 | NIST CSF | ONC | Owner | Testing |
|---|---|---|---|---|---|---|---|---|
| CTRL-AC-01 | Role-Based Access Control | §164.312(a)(1) | A.9.1.2 | CC6.1 | PR.AC-1 | §170.315(d)(1) | Security Lead | Quarterly |
| CTRL-AC-02 | Multi-Factor Authentication | §164.312(d) | A.9.4.2 | CC6.1 | PR.AC-7 | §170.315(d)(1) | Security Lead | Quarterly |
| CTRL-EN-01 | Encryption in Transit (TLS 1.3) | §164.312(e)(1) | A.13.1.1 | CC6.7 | PR.DS-2 | §170.315(d)(9) | Security Lead | Monthly |
| CTRL-EN-02 | Encryption at Rest (AES-256) | §164.312(a)(2)(iv) | A.10.1.1 | CC6.7 | PR.DS-1 | — | Security Lead | Quarterly |
| CTRL-AU-01 | Comprehensive Audit Logging | §164.312(b) | A.12.4.1 | CC7.2 | DE.AE-3 | §170.315(d)(2) | Security Lead | Monthly |
| CTRL-IR-01 | Incident Response Plan | §164.308(a)(6) | A.16.1.1 | CC7.3 | RS.RP-1 | — | Compliance Officer | Annually |
| CTRL-DR-01 | Backup & Recovery (RPO 1h / RTO 4h) | §164.308(a)(7) | A.17.1.1 | CC9.1 | PR.IP-4 | — | ISMS Manager | Semi-annually |
| CTRL-VM-01 | Vulnerability Scanning & Remediation | §164.308(a)(1)(ii)(B) | A.12.6.1 | CC7.1 | DE.CM-8 | — | Security Lead | Continuous |
| CTRL-TP-01 | Third-Party Risk Assessment | §164.308(b)(1) | A.15.1.1 | CC9.2 | ID.SC-1 | — | Compliance Officer | Annually |
| CTRL-PR-01 | Patient Consent Management | §164.508 | A.18.1.4 | P1.1 | PR.IP-1 | §170.315(d)(7) | Privacy Officer | Quarterly |
| CTRL-RA-01 | Annual Risk Assessment | §164.308(a)(1)(ii)(A) | A.8.2 | CC3.1 | ID.RA-1 | — | ISMS Manager | Annually |
| CTRL-IN-01 | FHIR Interoperability & ONC | — | — | — | — | §170.315(g)(10) | Integration Architect | Quarterly |
Full matrix with 12 controls × 5 frameworks. Evidence references available under NDA via the Evidence vault.
Download the complete control crosswalk matrix in Excel format with evidence links and testing results.