STIGViewer Support

164.306(b)(2)(iv)

paragraph (action item)

The probability and criticality of potential risks to electronic protected health information.

164.306 Security standards: General rules.

Related Frameworks

8 mappings across 4 frameworks
SCF8 mappings
RSK-01Risk Management Program
1.00
RSK-01.1Risk Framing
1.00
RSK-02Risk-Based Security Categorization
1.00
RSK-03Risk Identification
1.00
RSK-03.1Risk Catalog
1.00
RSK-04Risk Assessment
1.00
THR-09Threat Catalog
1.00
THR-10Threat Analysis
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AT-2(2)Insider Threat
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-5Plan of Action and Milestones
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00
CM-1Policy and Procedures
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.11.2
1.00
3.11.3
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.14.1
1.00
3.14.2
1.00
3.14.3
1.00

+2 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.