OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(7)(ii)(B)

paragraph (action item)

Disaster recovery plan (Required). Establish (and implement as needed) procedures to restore any loss of data.

164.308 Administrative safeguards.

Related Frameworks

1 mapping across 5 frameworks
SCF1 mapping
BCD-12Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (36) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CP-1Policy and Procedures
1.00
CP-10System Recovery and Reconstitution
1.00
CP-2Contingency Plan
1.00
CP-2(5)Continue Mission and Business Functions
1.00
CP-2(8)Identify Critical Assets
1.00
IR-1Policy and Procedures
1.00
IR-4Incident Handling
1.00
IR-8Incident Response Plan
1.00
AC-1Policy and Procedures
0.50
AT-1Policy and Procedures
0.50

+26 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.6.1
1.00
3.6.2
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (37) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000550
1.00
CCI-000551
1.00
CCI-000552
1.00
CCI-000822
1.00
CCI-000823
1.00
CCI-000824
1.00
CCI-000844
1.00
CCI-000845
1.00
CCI-000846
1.00
CCI-000847
1.00

+27 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-223941r991589_ruleCA-TSS RECOVER Control Option must be set to ON.
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.