OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.310

164.310(d)(2)(ii)

paragraph (action item)

Media re-use (Required). Implement procedures for removal of electronic protected health information from electronic media before the media are made available for re-use.

164.310 Physical safeguards.

Related Frameworks

2 mappings across 5 frameworks
SCF2 mappings
AST-09Secure Disposal, Destruction or Re-Use of Equipment
1.00
DCH-09System Media Sanitization
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (87) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-4(25)Data Sanitization
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-5Plan of Action and Milestones
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00

+77 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.7.3
1.00
3.8.3
0.80
3.8.1
0.50
3.8.2
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (9) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-001028
0.50
CCI-001032
0.50
CCI-001033
0.50
CCI-002578
0.50
CCI-002579
0.50
CCI-002580
0.50
CCI-005144
0.50
CCI-005145
0.50
CCI-005146
0.50
STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (10) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-268019r1031199_ruleApple iOS/iPadOS 18 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.
0.50
SV-268020r1031200_ruleApple iOS/iPadOS 18 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.
0.50
SV-268067r1031247_ruleApple iOS/iPadOS 18 must delete eSIM content when the device is erased.
0.50
SV-276389r1146663_ruleApple visionOS 2 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.
0.50
SV-276390r1146666_ruleApple visionOS 2 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.
0.50
SV-278779r1150584_ruleApple iOS/iPadOS 26 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.
0.50
SV-278780r1150587_ruleApple iOS/iPadOS 26 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.
0.50
SV-278826r1150725_ruleApple iOS/iPadOS 26 must delete eSIM content when the device is erased.
0.50
SV-282798r1195709_ruleApple visionOS 26 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.
0.50
SV-282799r1195712_ruleApple visionOS 26 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.