164.308(a)(7)(ii)(C) Emergency Mode Operation Plan (Required)
Administrative safeguard · Required
The requirement as we hold it
Emergency Mode Operation Plan (Required). Establish procedures to enable continuation of critical processes and security of ePHI during emergency mode. NIST recommends documented manual workflows preserving access controls.
The examiner asks
- Show me how critical processes continue, and how ePHI stays protected, during emergency mode.
- What manual workflows run, and do they keep access controls?
Evidence to bring
- the emergency mode plan
- the manual workflow for ePHI
Source: 164.308(a)(7)(ii)(C) at eCFR. Our statement of the clause, not the instrument verbatim.