Section § 164.308(a)(6)Security incident procedures

What it says

(6)(i) Standard: Security incident procedures. Implement policies and procedures to address security incidents.

(ii) Implementation specification: Response and reporting (Required). Identify and respond to suspected or known security incidents; mitigate, to the extent practicable, harmful effects of security incidents that are known to the covered entity or business associate; and document security incidents and their outcomes.

HIPAA, the United States rules protecting health information, § 164.308(a)(6)

What is in the packs for this

• XLSExcel

  Security Rule Safeguard Register

  Helps with this requirementin HIPAA Security Rule ReadinessIts Framework References cite this section. Lists the 22 Security Rule standards and their 41 implementation specifications in plain words, required or addressable, with an owner and the evidence to keep.