Administrative Safeguards
22 controlsSecurity management, workforce security, information access, security awareness, and contingency planning.
Not startedHealthcare
Health Insurance Portability and Accountability Act
U.S. federal law establishing standards for electronic healthcare transactions and national identifiers, and security and privacy of health data (PHI).
5Categories
57Controls
—Readiness
Control Categories
Physical Safeguards
10 controlsFacility access, workstation security, and device/media controls.
Not startedTechnical Safeguards
14 controlsAccess control, audit controls, integrity mechanisms, and transmission security.
Not startedOrganizational Requirements
6 controlsBusiness associate agreements, group health plan requirements, and policies.
Not startedBreach Notification Rule
5 controlsIndividual notification, media notification, HHS notification, and breach risk assessment.
Not started