OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(7)(ii)(A)

paragraph (action item)

Data backup plan (Required). Establish and implement procedures to create and maintain retrievable exact copies of electronic protected health information.

164.308 Administrative safeguards.

Related Frameworks

1 mapping across 5 frameworks
SCF1 mapping
BCD-11Data Backups
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (68) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-20(5)Portable Storage Devices — Prohibited Use
1.00
CA-3Information Exchange
1.00
CM-2(3)Retention of Previous Configurations
1.00
CM-8(1)Updates During Installation and Removal
1.00
CM-8(2)Automated Maintenance
1.00
CM-8(4)Accountability Information
1.00
CP-1Policy and Procedures
1.00
CP-2Contingency Plan
1.00
CP-2(5)Continue Mission and Business Functions
1.00
CP-2(8)Identify Critical Assets
1.00

+58 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.8.9
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (18) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000505
1.00
CCI-000534
1.00
CCI-000535
1.00
CCI-000536
1.00
CCI-000537
1.00
CCI-000538
1.00
CCI-000539
1.00
CCI-000540
1.00
CCI-002836
1.00
CCI-004018
1.00

+8 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (47) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-104519r1_ruleSymantec ProxySG must support organizational requirements to conduct backups of system level information contained in the ProxySG when changes occur or weekly, whichever is sooner.
0.50
SV-202136r961863_ruleThe network device must be configured to conduct backups of system level information contained in the information system when changes occur.
0.50
SV-202137r961863_ruleThe network device must support organizational requirements to conduct backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.
0.50
SV-215710r1069534_ruleThe Cisco router must be configured to back up the configuration when changes occur.
0.50
SV-215855r1069501_ruleThe Cisco router must be configured to back up the configuration when changes occur.
0.50
SV-216545r1069525_ruleThe Cisco router must be configured to back up the configuration when changes occur.
0.50
SV-217351r961863_ruleThe Juniper router must be configured to support organizational requirements to conduct backups of the configuration when changes occur.
0.50
SV-217481r961863_ruleThe HP FlexFabric Switch must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.
0.50
SV-220514r1069522_ruleThe Cisco switch must be configured to support organizational requirements to conduct backups of the configuration when changes occur.
0.50
SV-220514r1135491_ruleThe Cisco switch must be configured to support organizational requirements to conduct backups of the configuration when changes occur.
0.50

+37 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.