Annex
Healthcare Sector GRC Requirements Annex
This annex identifies the additional GRC obligations that apply to organizations operating in or adjacent to the healthcare sector. It maps applicable regulatory frameworks to the core GRC library controls and identifies gap areas requiring sector-specific supplementation.
- Type
- Annex
- Version
- 1.1.31
- Date
- 2026-10-26
- Owner
- Chief Compliance Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Compliance: Sector-Specific
- Review frequency
- Annual and upon material regulatory change in applicable jurisdictions
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Regulatory landscape overview
- Key regulatory requirements
- Gap analysis: core library vs. healthcare requirements
- Key healthcare-specific controls
Related documents
- HIPAA Operational Compliance Procedurecompliance
- compliance/
README.md (opens in a new tab) source - Legal and Regulatory Compliance Policycompliance
- Global Regulatory Applicability Registercompliance
- GRC Library Compliance Alignment Matrixcompliance
- Compliance Obligations Register Templatecompliance
- Privacy and Data Governance Policyprivacy
- Privacy Jurisdiction Indexprivacy
- Enterprise Risk Management Standardrisk
- Information Security Policysecurity
- Business Continuity and Disaster Recovery Standardresilience
Next
All Documents