Verified standard-to-guidance relationships
Security Management Process
45 CFR § 164.308(a)(1)
NIST SP 800-66 Rev. 2, Section 5.1.1: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Assigned Security Responsibility
45 CFR § 164.308(a)(2)
NIST SP 800-66 Rev. 2, Section 5.1.2: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Workforce Security
45 CFR § 164.308(a)(3)
NIST SP 800-66 Rev. 2, Section 5.1.3: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Information Access Management
45 CFR § 164.308(a)(4)
NIST SP 800-66 Rev. 2, Section 5.1.4: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Security Awareness and Training
45 CFR § 164.308(a)(5)
NIST SP 800-66 Rev. 2, Section 5.1.5: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Security Incident Procedures
45 CFR § 164.308(a)(6)
NIST SP 800-66 Rev. 2, Section 5.1.6: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Contingency Plan
45 CFR § 164.308(a)(7)
NIST SP 800-66 Rev. 2, Section 5.1.7: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Evaluation
45 CFR § 164.308(a)(8)
NIST SP 800-66 Rev. 2, Section 5.1.8: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Business Associate Contracts and Other Arrangements
45 CFR § 164.308(b)(1)
NIST SP 800-66 Rev. 2, Section 5.1.9: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Facility Access Controls
45 CFR § 164.310(a)
NIST SP 800-66 Rev. 2, Section 5.2.1: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Workstation Use
45 CFR § 164.310(b)
NIST SP 800-66 Rev. 2, Section 5.2.2: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Workstation Security
45 CFR § 164.310(c)
NIST SP 800-66 Rev. 2, Section 5.2.3: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Device and Media Controls
45 CFR § 164.310(d)
NIST SP 800-66 Rev. 2, Section 5.2.4: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Access Control
45 CFR § 164.312(a)
NIST SP 800-66 Rev. 2, Section 5.3.1: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Audit Controls
45 CFR § 164.312(b)
NIST SP 800-66 Rev. 2, Section 5.3.2: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Integrity
45 CFR § 164.312(c)
NIST SP 800-66 Rev. 2, Section 5.3.3: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Person or Entity Authentication
45 CFR § 164.312(d)
NIST SP 800-66 Rev. 2, Section 5.3.4: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
Transmission Security
45 CFR § 164.312(e)
NIST SP 800-66 Rev. 2, Section 5.3.5: NIST implementation guidance for this HIPAA Security Rule standard. Open NIST guidance
References
- 45 CFR Part 164, Subpart C Electronic Code of Federal Regulations
- Summary of the HIPAA Security Rule HHS Office for Civil Rights
- NIST SP 800-66 Rev. 2 National Institute of Standards and Technology
- NIST Cybersecurity and Privacy Reference Tool National Institute of Standards and Technology
- NIST SP 800-66 Rev. 2 PDF National Institute of Standards and Technology