AuditRubric
Physical Safeguards HIPAA Security Rule 2003

HIPAA Security Rule: Physical Safeguards Security Controls

Physical measures, policies, and procedures to protect electronic information systems, buildings, and equipment from natural and environmental hazards and unauthorized intrusion.

4 controls
0 critical
24h est. effort
4 categories

Facility Access Controls

hipaa-ps-1

Implement policies and procedures to limit physical access to electronic information systems and the facilities where they are housed

Physical access to servers, network equipment, workstations, and the facilities that house them must...

Workstation Use

hipaa-ps-2

Specify the proper functions to be performed by workstations that access ePHI and the manner in which those functions are to be performed

Workstations used to access ePHI should have clearly defined, documented uses and restrictions. Pers...

Workstation Security

hipaa-ps-3

Implement physical safeguards for all workstations that access ePHI to restrict access to authorized users

Physical access to workstations must be restricted to authorized users. An unlocked workstation in a...

Device and Media Controls

hipaa-ps-4

Implement policies and procedures governing the receipt, removal, and disposal of hardware and electronic media containing ePHI

Electronic media containing ePHI, including hard drives, USB drives, backup tapes, optical discs, an...