OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(3)(ii)(A)

paragraph (action item)

Authorization and/or supervision (Addressable). Implement procedures for the authorization and/or supervision of workforce members who work with electronic protected health information or in locations where it might be accessed.

164.308 Administrative safeguards.

Related Frameworks

4 mappings across 5 frameworks
SCF4 mappings
HRS-01Human Resources Security Management
1.00
IAC-07.1Change of Roles & Duties
1.00
IAC-08Role-Based Access Control (RBAC)
1.00
IAC-28.1Management Approval For New or Changed Accounts
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-10Concurrent Session Control
1.00
AC-14Permitted Actions Without Identification or Authentication
1.00
AC-16Security and Privacy Attributes
1.00
AC-17Remote Access
1.00
AC-18Wireless Access
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(7)Privileged User Accounts
1.00
AC-24Access Control Decisions
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (8) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.16
1.00
3.1.18
1.00
3.1.2
1.00
3.1.4
1.00
3.1.5
1.00
3.1.22
0.80
3.1.3
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000001
1.00
CCI-000002
1.00
CCI-000003
1.00
CCI-000004
1.00
CCI-000005
1.00
CCI-000006
1.00
CCI-001358
1.00
CCI-001360
1.00
CCI-001407
1.00
CCI-001504
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (41) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-104483r1_ruleSymantec ProxySG must be configured with only one local account that is used as the account of last resort.
1.00
SV-202051r1051115_ruleThe network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-215679r1051115_ruleThe Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-215824r1051115_ruleThe Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-216530r1051115_ruleThe Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-217321r1051115_ruleThe Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-220487r1051115_ruleThe Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-220487r960969_ruleThe Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-220535r1051115_ruleThe Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00
SV-220587r1051115_ruleThe Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
1.00

+31 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.