164.308(a)(3)(ii)(A) Authorization and Supervision (Addressable)
Administrative safeguard · Addressable
The requirement as we hold it
Authorization and Supervision (Addressable). Implement procedures for authorization and supervision of workforce members who work with ePHI. NIST recommends formal approval workflows and supervisory checks for sensitive functions.
The examiner asks
- Show me the procedure that authorises and supervises workforce members who work with ePHI.
- Who approves access to a sensitive function, and where is that approval recorded?
Evidence to bring
- the authorisation workflow
- a recorded supervisory approval
Source: 164.308(a)(3)(ii)(A) at eCFR. Our statement of the clause, not the instrument verbatim.