OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.310

164.310(a)(2)(iii)

paragraph (action item)

Access control and validation procedures (Addressable). Implement procedures to control and validate a person's access to facilities based on their role or function, including visitor control, and control of access to software programs for testing and revision.

164.310 Physical safeguards.

Related Frameworks

4 mappings across 5 frameworks
SCF4 mappings
IAC-01Identity & Access Management (IAM)
1.00
PES-02Physical Access Authorizations
1.00
PES-03Physical Access Control
1.00
PES-06Visitor Control
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-10Concurrent Session Control
1.00
AC-12Session Termination
1.00
AC-14Permitted Actions Without Identification or Authentication
1.00
AC-16Security and Privacy Attributes
1.00
AC-17Remote Access
1.00
AC-18Wireless Access
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(2)Automated Temporary and Emergency Account Management
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (15) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.16
1.00
3.1.18
1.00
3.1.2
1.00
3.1.4
1.00
3.1.5
1.00
3.10.1
1.00
3.10.2
1.00
3.10.3
1.00
3.10.4
1.00

+5 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000001
1.00
CCI-000002
1.00
CCI-000003
1.00
CCI-000004
1.00
CCI-000005
1.00
CCI-000006
1.00
CCI-000756
1.00
CCI-000757
1.00
CCI-000758
1.00
CCI-000759
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-256877r958482_ruleIndividual user accounts with passwords must be maintained for the Hardware Management Console operating system and application.
1.00
SV-237906r858945_ruleThe IBM z/VM TCP/IP configuration must include an SSLSERVERID statement.
0.50
SV-251363r806044_ruleAll network infrastructure devices must be located in a secure room with limited access.
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.