OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.308

164.308(a)(7)(ii)(E)

paragraph (action item)

Applications and data criticality analysis (Addressable). Assess the relative criticality of specific applications and data in support of other contingency plan components.

164.308 Administrative safeguards.

Related Frameworks

4 mappings across 5 frameworks
SCF4 mappings
AST-01Asset Governance
1.00
AST-01.1Asset-Service Dependencies
1.00
BCD-02Identify Critical Assets
1.00
TPM-02Third-Party Criticality Assessments
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-19Access Control for Mobile Devices
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-4Information Flow Enforcement
1.00
AT-1Policy and Procedures
1.00
CA-6Authorization
1.00
CA-9Internal System Connections
1.00
CM-12Information Location
1.00
CM-13Data Action Mapping
1.00
CM-2Baseline Configuration
1.00
CM-2(7)Configure Systems and Components for High-risk Areas
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (14) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.13.1
1.00
3.13.2
1.00
3.4.1
1.00
3.6.1
1.00
3.6.2
1.00

+4 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000421
1.00
CCI-000422
1.00
CCI-000423
1.00
CCI-000424
1.00
CCI-000425
1.00
CCI-000426
1.00
CCI-000571
1.00
CCI-000572
1.00
CCI-000573
1.00
CCI-000574
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-222635r961863_ruleThe application must not be hosted on a general purpose machine if the application is designated as critical or high availability by the ISSO.
1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.