CIS Controls v8.1 Mapping to Health Insurance Portability and Accountability Act (HIPAA), Regulation Text, 2013
CIS ControlsHealthcare
Published on February 4, 2025
This document contains mappings of the CIS Critical Security Controls® (CIS Controls®) v8.1 and CIS Safeguards to the Health Insurance Portability and Accountability Act (HIPAA), Regulation Text, 2013.
Turn HIPAA Into Actionable Controls
Start a HIPAA‑Aligned Assessment with CIS SecureSuite® Platform

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.