STIGViewer Support

164.308(a)(1)(ii)(B)

paragraph (action item)

Risk management (Required). Implement security measures sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level to comply with § 164.306(a).

164.308 Administrative safeguards.

Related Frameworks

2 mappings across 4 frameworks
SCF2 mappings
GOV-09Define Control Objectives
1.00
GOV-15.2Implement Controls
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (54) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CM-3Configuration Change Control
1.00
CM-9Configuration Management Plan
1.00
CP-1Policy and Procedures
1.00
IA-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00

+44 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.