164.310(d)(1) Device and Media Controls (Standard)
Physical safeguard · Standard
The requirement as we hold it
Device and Media Controls (Standard). Implement policies governing receipt and removal of hardware and electronic media containing ePHI into, out of, and within the facility.
The examiner asks
- Show me how hardware and media holding ePHI are received, removed and moved within the facility.
- Where is the movement recorded?
Evidence to bring
- the device and media policy
- the movement record
Source: 164.310(d)(1) at eCFR. Our statement of the clause, not the instrument verbatim.