OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(5)(i)

paragraph (action item)

Standard: Security awareness and training. Implement a security awareness and training program for all members of its workforce (including management).

164.308 Administrative safeguards.

Related Frameworks

2 mappings across 5 frameworks
SCF2 mappings
SAT-01Security, Compliance & Resilience-Minded Workforce
1.00
SAT-02Security, Compliance & Resilience Awareness Training
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (48) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-22Publicly Accessible Content
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-2(2)Insider Threat
1.00
AT-2(3)Social Engineering and Mining
1.00
AT-2(6)Cyber Threat Environment
1.00
AT-3Role-based Training
1.00
AT-3(5)Processing Personally Identifiable Information
1.00
PS-1Policy and Procedures
1.00
PS-3(2)Formal Indoctrination
1.00

+38 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.2.1
1.00
3.2.2
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (43) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000100
1.00
CCI-000101
1.00
CCI-000102
1.00
CCI-000103
1.00
CCI-000104
1.00
CCI-000105
1.00
CCI-000106
1.00
CCI-000108
1.00
CCI-000109
1.00
CCI-000110
1.00

+33 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-243442r991589_ruleAdministrators of high-value IT resources must complete required training.
1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.