We address here various topics of importance that are relevant to the HITRUST RMF but which may be considered ancillary to the basic risk management process as articulated in the body of this document.