Explore safeguard categories, implementation guides, and compliance controls.
Administrative actions, policies, and procedures to manage the selection, development, implementation, and maintenance of security measures to protect ePHI and to manage the conduct of the covered entity's or business associate's workforce.
Physical measures, policies, and procedures to protect electronic information systems and related buildings and equipment from natural and environmental hazards and unauthorized intrusion.
The technology and the policy and procedures for its use that protect ePHI and control access to it.
Requirements for business associate contracts, other arrangements, and group health plan documents.
Requirements for implementing and documenting policies, procedures, and maintaining documentation.