Sources

Every requirement shown is our statement of a clause of the HIPAA Security Rule, read against the copy we hold and cited to its clause, not the instrument verbatim. Each requirement page links to the clause at the Electronic Code of Federal Regulations (eCFR). Editions held: the HIPAA Security Rule as it currently stands, with the rule proposed to make encryption and multi-factor authentication mandatory and that proposal not final.

The examiner questions and the evidence to bring are The Art of Service's reading, in our words, and are not a statement of the standard, not binding on an assessor, and not legal advice.

Where a text is not held in full, the page names it and does not state it. The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001, Australia. support@theartofservice.com.