HIPAA Security Rule
What is HIPAA Security Rule?
HIPAA regulations requiring covered entities to implement administrative, physical, and technical safeguards to protect electronic protected health information.
Terms that appear alongside hipaa security rule
Each of these is named in at least one of the same controls as hipaa security rule. The number is how many controls name both.
- hipaa 21 shared controls
- nist 13 shared controls
- breach notification 11 shared controls
- encryption 10 shared controls
- audit 9 shared controls
- integrity 7 shared controls
- business associate 7 shared controls
- compliance 7 shared controls
Frameworks that govern hipaa security rule
What the standards actually require on hipaa security rule
Requirements naming hipaa security rule across 5 standards, quoted from the control text.
The administrative, physical and technical safeguards and the policies and documentation requirements of the Security Rule (45 CFR 164.308, 164.310, 164.312 and 164.316) apply to a business associate of a covered entity in the same manner as to the covered ent...
hitech-act::13401 · Section 13401: HIPAA Security Rule safeguards and penalties apply directly to business associates →Implement HIPAA Security Rule Administrative Safeguards for incident response + contingency + evaluation. Security Incident Procedures per 45 CFR 164.308(a)(6): identify and respond to suspected or known security incidents + mitigate harmful effects + document...
NISTSP66-3 · Security Incident Procedures, Contingency Plan, and Evaluation →Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control guards network resources against use without authorization, admitting only authorized staff or devices to services, applications, information flows, stored information and network element...
X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →HBNR crosswalk to comprehensive security + privacy + health frameworks. NIST CSF 2.0 mapping: GOVERN (privacy officer + IR + records + TPSP) + IDENTIFY (PHR identifiable info inventory + 3rd-party SDK audit + affected individual identification) + PROTECT (encr...
HBNR-Crosswalk-NIST-CSF-ISO-HIPAA · Crosswalk to NIST CSF 2.0, NIST 800-66, ISO 27001/27701, SOC 2 and HIPAA →Per Iowa Code 715D.5-1 and Iowa Personal Information Security Breach Notification Law (Iowa Code 715C separate statute) controllers and processors must implement security + breach response + records discipline.
ICDPA-Security-ReasonablePractices-Breach-Notification-Iowa-Code-715C-Records-Encryption-Pseudonymisation · Iowa CDPA Security + Reasonable Practices + Iowa Personal Information Security Breach Notification Law (Iowa Code 715C) + Records + Encryption + Pseudonymisation →Questions people ask about hipaa security rule
What is HIPAA Security Rule?
Why is HIPAA Security Rule important for compliance?
Which compliance frameworks address HIPAA Security Rule?
Where can I learn more about HIPAA Security Rule?
See how HIPAA Security Rule applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.