OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(6)(ii)

paragraph (action item)

Implementation specification: Response and reporting (Required). Identify and respond to suspected or known security incidents; mitigate, to the extent practicable, harmful effects of security incidents that are known to the covered entity or business associate; and document security incidents and their outcomes.

164.308 Administrative safeguards.

Related Frameworks

1 mapping across 4 frameworks
SCF1 mapping
IRO-02Incident Handling
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (94) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3Role-based Training
1.00
AU-1Policy and Procedures
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-6Audit Record Review, Analysis, and Reporting
1.00
AU-7Audit Record Reduction and Report Generation
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00

+84 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.14.6
1.00
3.14.7
1.00
3.3.1
1.00
3.3.2
1.00
3.3.6
1.00

+2 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000437
1.00
CCI-000438
1.00
CCI-000439
1.00
CCI-000440
1.00
CCI-000441
1.00
CCI-000669
1.00
CCI-000670
1.00
CCI-000671
1.00
CCI-000672
1.00
CCI-000673
1.00

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.