OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(1)(i)

paragraph (action item)

Standard: Security management process. Implement policies and procedures to prevent, detect, contain, and correct security violations.

164.308 Administrative safeguards.

Related Frameworks

5 mappings across 5 frameworks
SCF5 mappings
CFG-01Configuration Management Program
1.00
CHG-01Change Management Program
1.00
GOV-02Publishing Security, Compliance & Resilience Documentation
1.00
IRO-01Incident Response Operations
1.00
MON-01Continuous Monitoring
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-14Permitted Actions Without Identification or Authentication
1.00
AC-2Account Management
1.00
AC-4Information Flow Enforcement
1.00
AC-9Previous Logon Notification
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3Role-based Training
1.00
AU-1Policy and Procedures
1.00
AU-11Audit Record Retention
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (26) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.11.1
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.13.1
1.00
3.13.2
1.00

+16 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000117
1.00
CCI-000119
1.00
CCI-000120
1.00
CCI-000122
1.00
CCI-000286
1.00
CCI-000287
1.00
CCI-000289
1.00
CCI-000290
1.00
CCI-000292
1.00
CCI-000421
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (25) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-222630r961863_ruleThe Configuration Management (CM) repository must be properly patched and STIG compliant.
1.00
SV-222631r961863_ruleAccess privileges to the Configuration Management (CM) repository must be reviewed every three months.
1.00
SV-222632r961863_ruleA Software Configuration Management (SCM) plan describing the configuration control and change management process of application objects developed by the organization and the roles and responsibilities of the organization must be created and maintained.
1.00
SV-222633r961863_ruleA Configuration Control Board (CCB) that meets at least every release cycle, for managing the Configuration Management (CM) process must be established.
1.00
SV-224486r1144836_ruleAn active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).
1.00
SV-224486r959010_ruleAn active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).
1.00
SV-224723r1145986_ruleAn active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).
1.00
SV-230186r1144192_ruleAn active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).
1.00
SV-230186r959010_ruleAn active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).
1.00
SV-239862r953982_ruleThe Cisco ASA must be configured to send log data of denied traffic to a central audit server for analysis.
1.00

+15 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.