Section § 164.308(a)(5)Security awareness and training

What it says

(5)(i) Standard: Security awareness and training. Implement a security awareness and training program for all members of its workforce (including management).

(ii) Implementation specifications. Implement:

(A) Security reminders (Addressable). Periodic security updates.

(B) Protection from malicious software (Addressable). Procedures for guarding against, detecting, and reporting malicious software.

(C) Log-in monitoring (Addressable). Procedures for monitoring log-in attempts and reporting discrepancies.

(D) Password management (Addressable). Procedures for creating, changing, and safeguarding passwords.

HIPAA, the United States rules protecting health information, § 164.308(a)(5)

What is in the packs for this

• XLSExcel

  Security Rule Safeguard Register

  Helps with this requirementin HIPAA Security Rule ReadinessIts Framework References cite this section. Lists the 22 Security Rule standards and their 41 implementation specifications in plain words, required or addressable, with an owner and the evidence to keep.