3 ms·
HIPAA is one of the few that makes clear the types of data (PHI and PII) that come under the frameworks purview during development which makes masking mandatory
by notesinthefield 8mo ago
HIPAA is one of the few that makes clear the types of data (PHI and PII) that come under the frameworks purview during development which makes masking mandatory for non-production environments. Other frameworks families, NIST RMF, FedRAMP and CMMC very much care about software development practices in depth.
- raw_anon_1111 8mo agoBut do they care whether your code was shared with a third party?
- notesinthefield 8mo agoOf course, is this a serious question?
- cap11235 8mo agoIs code personal information?
- notesinthefield 8mo agoMy statement wasnt a literal reflection of software and data protection controls. Youre free to explore those mentioned.