Thursday, February 25, 2016

Office for Civil Rights issues crosswalk between HIPAA, NIST Cybersecurity Plan

Targeting to assist HIPAA covered entities strengthen their cybersecurity preparedness, HHS Office for Civil Rights have issued a crosswalk recognizing mappings between NIST's Framework for Improving Critical Infrastructure Cybersecurity and the HIPAA Security Rule.


Established in partnership with NIST and ONC, the crosswalk also involves mappings to other commonly utilized security frameworks, officials stated.


In the month of February 2014, NIST issued the framework to help agencies better understand and handle cybersecurity risks. Many agencies in healthcare and other industries voluntarily depend on detailed security guidance and particular standards published by NIST.


Entities bound by HIPAA, meanwhile, are needed to implement powerful data security safeguards to comply with the HIPAA Security Rule and secure the health data they make, receive, maintain or transmit.

No comments:

Post a Comment