Appendix D. HIPAA Security Rule Standards

HIPAA is the Health Insurance Portability and Accountability Act (see Chapter 4, “Governance and Risk Management”). Passed in 1996, HIPAA is designed to protect confidential healthcare information through improved security standards and federal privacy legislation. It defines requirements for storing patient information before, during, and after electronic transmission. It also identifies compliance guidelines for critical business tasks such as risk analysis, awareness training, audit trail, disaster recovery plans, information access control, and encryption.

HIPAA Security Standards

The proposed HIPAA security regulations establish a minimum framework of standard procedures for ensuring the protection ...

Get Information Security: Principles and Practices, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.