Technical Safeguards HIPAA Security Rule 2003

HIPAA Security Rule: Technical Safeguards Security Controls

Technology and related policies and procedures that protect ePHI and control access to it.

5 controls

3 critical

36h est. effort

5 categories

Access Control

Implement technical policies and procedures to allow access to ePHI only to authorized persons or software programs

Technical access controls ensure that only authenticated, authorized users and systems can access eP...

Implement hardware, software, and procedural mechanisms that record and examine activity in systems containing ePHI

Audit logging is fundamental to accountability: you cannot investigate a breach if you have no recor...

Implement policies and procedures to protect ePHI from improper alteration or destruction

The integrity of ePHI means that it has not been altered or destroyed in an unauthorized manner. Cor...

Implement procedures to verify that a person or entity seeking access to ePHI is who they claim to be

Authentication is the technical mechanism for verifying identity before granting access to ePHI. Use...

Implement technical security measures to guard against unauthorized access to ePHI transmitted over electronic communications networks

When ePHI travels across a network, it is vulnerable to interception. Unencrypted ePHI sent over ema...