Requirement

Details

I

Review of Information System Activity § 164.308(1) (ii) (D)

Implementation of procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident reports

II

Protection from Malicious Software § 164.308(a)(5)(ii)(B)

Calls for procedures for guarding against, detecting and reporting on malicious software

III

Log-in Monitoring § 164.308(a)(5)(ii)(C)

Monitoring log-in attempts and reporting discrepancies

IV

Security Incident Procedures §164.308(a)(6)(ii)

Implementation of methods to identify and respond to suspected or known security incidents; mitigate to the extent practicable

V

Audit Controls § 164.312(b)

Implementation of hardware, software and/or procedural mechanisms that record and examine activity in information systems that contain or use ePHI

VI

Integrity & Authentication of ePHI § 164.312(c)(1) and (2)

Electronic measures to corroborate that ePHI has not been altered or destroyed in an unauthorized or improper manner

VII

Person or Entry Authentication § 164.312(d)

Procedures to verify that a person or entity seeking access to ePHI is the claimed.