ASD-ISM Updated! September 2022

Just in case you missed it! Posting here for my own use.... 

Information Security Manual (ISM) | Cyber.gov.au

Download

Information Security Manual (September 2022) 2.59 MB .pdf

Information Security Manual (September 2022) 3.67 MB .docx

System Security Plan Annex Template (September 2022) 102.31 KB .xlsx

Cloud Controls Matrix Template (September 2022) 158.04 KB .xlsx

Download Everything: Information Security Manual (September 2022) 47.18 MB .zip

SP 800-66 Rev. 2 Reverse Mapped HIPPA - NIST Updated Guidance for Health Care Cybersecurity

Here's a NIST mapping crosswalk between the HIPAA requirements and NIST SP 800-53r5 in a spreadsheet format.

Spreadsheet Here: 2022 HIPAA Crosswalk SP 800-66 ipd Table 12.ver.01.xlsx - Google Drive from Blog Downloads (compliancequickstart.com)

NIST Page: SP 800-66 Rev. 2 (Draft), Implementing the HIPAA Security Rule: Cybersecurity Resources | CSRC (nist.gov)

Publication Link: NIST SP 800-66r2 initial public draft, Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide

I reworked the information from the initial public draft into a spreadsheet that also allows easy importing into different tools. Additionally, I included a direct NIST map, essentially reversing the look-up. Finally, all control IDs are now two digits which allows for proper sorting and lookups with tools inside arrays.

Here's a snapshot of the format (click to view):