HIPAA69
The U.S. Health Insurance Portability and Accountability Act Security and Privacy Rules governing administrative, physical, and technical safeguards for protected health information.
Requirements in this framework
- Access Authorization
- Access Control
- Access Control and Validation Procedures
- Access control lifecycle management
- Access Establishment and Modification
- Accountability
- Administrative safeguards
- Applications and Data Criticality Analysis
- Assigned Security Responsibility
- Audit Controls
- Authorization and/or Supervision
- Automatic Logoff
- Availability
- Business Associate Contracts and Other Arrangements
- Business associate governance
- Contingency Operations
- Contingency Plan
- Contingency planning and backup safeguards
- Data Backup and Storage
- Data Backup Plan
- Device and Media Controls
- Disaster Recovery Plan
- Disposal
- Documentation
- Emergency Access Procedure
- Emergency Mode Operation Plan
- Encryption
- Encryption and Decryption
- Evaluation
- Facility Access Controls
- Facility Security Plan
- Information Access Management
- Information System Activity Review
- Integrity
- Integrity Controls
- Isolating Health Care Clearinghouse Functions
- Log-in Monitoring
- Maintenance Records
- Mechanism to Authenticate Electronic Protected Health Information
- Media Re-use
- Password Management
- Person or Entity Authentication
- Physical safeguards
- Policies and documentation
- Policies and Procedures
- Protection from Malicious Software
- Response and Reporting
- Risk Analysis
- Risk analysis and risk management
- Risk Management
- Sanction Policy
- Security Awareness and Training
- Security incident procedures
- Security Incident Procedures
- Security Management Process
- Security Reminders
- Technical safeguards
- Termination Procedures
- Testing and Revision Procedures
- Time Limit
- Transmission Security
- Unique User Identification
- Updates
- Workforce Clearance Procedure
- Workforce Security
- Workforce security and awareness training
- Workstation Security
- Workstation Use
- Written Contract or Other Arrangement