07.c.03 Media containing information is protected against unauthorized access during transport
What the standard requires
The CSF is distributed under a HITRUST subscription licence, so the control text cannot be embedded in this product.
A certifiable control framework that harmonises HIPAA, NIST, ISO 27001, PCI DSS, and other authoritative sources into one control set, with requirements tiered by implementation level so the applicable controls scale with an organization's risk factors.
Get access from HITRUST →If your organisation holds a licence for HITRUST CSF v11, CMDash can load the real text against every control through the framework import, where it is stamped as tenant-provided.
Cross-framework mappings
No cross-framework mapping is seeded for this control. That is stated rather than filled in: a mapping nobody authored is worse than a gap you can see.
In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.