STIGViewer Support

164.306(b)(2)(ii)

paragraph (action item)

The covered entity's or the business associate's technical infrastructure, hardware, and software security capabilities.

164.306 Security standards: General rules.

Related Frameworks

2 mappings across 4 frameworks
SCF2 mappings
PRM-05Security, Compliance & Resilience Requirements Definition
1.00
SEA-02Alignment With Enterprise Architecture
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-18(1)Authentication and Encryption
1.00
AC-18(4)Restrict Configurations by Users
1.00
AC-19Access Control for Mobile Devices
1.00
AC-3Access Enforcement
1.00
AC-4Information Flow Enforcement
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (7) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.13.1
1.00
3.13.2
1.00
3.13.4
1.00
3.13.5
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (70) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+60 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.