164.310(d)(2)(iii) Accountability (Addressable)
Physical safeguard · Addressable
The requirement as we hold it
Accountability (Addressable). Maintain a record of the movements of hardware and electronic media containing ePHI and any person responsible. NIST recommends asset tagging, custody logs, and reconciliation.
The examiner asks
- Show me the record of hardware and media movements and the person responsible for each.
- How do you reconcile the asset list to what is on the floor?
Evidence to bring
- the custody log
- the asset reconciliation
Source: 164.310(d)(2)(iii) at eCFR. Our statement of the clause, not the instrument verbatim.