encryption Controls

Sensitive data at rest is encrypted using current standards

Full-disk encryption is enforced on all endpoints and portable storage

Implement physical safeguards for all workstations that access ePHI to restrict access to authorized users

Implement technical policies and procedures to allow access to ePHI only to authorized persons or software programs

Implement policies and procedures to protect ePHI from improper alteration or destruction

Implement technical security measures to guard against unauthorized access to ePHI transmitted over electronic communications networks

The confidentiality, integrity, and availability of data-at-rest are protected

The confidentiality, integrity, and availability of data-in-transit are protected

Sensitive data is protected during transmission and storage