Context
An incident is not automatically a reportable breach; facts and applicable rules determine next steps.
Example
A compromised account attempting to access an ePHI system is a security incident.
References
- 45 CFR 164.304 Electronic Code of Federal Regulations