HIPAA – Identitiy and Access Management Considerations
February 12, 2012|
Safeguard |
Standard |
Implementation Specification |
| Technical | Access Control | Unique User Identification |
| Automatic Log-off | ||
| Audit Controls | ||
| Person or entity Authentication | Strong Authentication | |
| Physical | Facility for access controls | Physical Access |
| Administration | Security Management Process | Risk Management |
| Activity Review | ||
| Workforce Security | Termination Procedure | |
| Information Access Management | Isolation Healthcare Clearing House | |
| Security Incident Procedures | Login Monitoring |
“HIAA” – Health Insurers Association of America and “AAHP” – American Association of Health Plans members