164.312(b) Audit Controls (Standard)
Technical safeguard · Standard
The requirement as we hold it
Audit Controls (Standard). Implement hardware, software, and procedural mechanisms that record and examine activity in information systems that contain or use ePHI. NIST recommends central log management aligned to SP 800-92.
The examiner asks
- Show me the mechanisms that record and examine activity in systems holding ePHI.
- Where are the logs centralised, and who examines them?
Evidence to bring
- the audit logging configuration
- a recent log examination
Source: 164.312(b) at eCFR. Our statement of the clause, not the instrument verbatim.