OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.310

164.310(d)(2)(iii)

paragraph (action item)

Accountability (Addressable). Maintain a record of the movements of hardware and electronic media and any person responsible therefore.

164.310 Physical safeguards.

Related Frameworks

5 mappings across 5 frameworks
SCF5 mappings
AST-02Asset Inventories
1.00
AST-02.1Updates During Installations / Removals
1.00
AST-02.9Configuration Management Database (CMDB)
1.00
AST-03Asset Ownership Assignment
1.00
AST-03.1Accountability Information
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-20Use of External Systems
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
CM-12Information Location
1.00
CM-13Data Action Mapping
1.00
CM-7Least Functionality
1.00
CM-7(1)Periodic Review
1.00
CM-7(4)Unauthorized Software — Deny-by-exception
1.00
CM-7(5)Authorized Software — Allow-by-exception
1.00
CM-8System Component Inventory
1.00
CM-8(1)Updates During Installation and Removal
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.20
1.00
3.4.1
1.00
3.4.2
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (76) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000093
1.00
CCI-000207
1.00
CCI-000389
1.00
CCI-000390
1.00
CCI-000392
1.00
CCI-000393
1.00
CCI-000395
1.00
CCI-000396
1.00
CCI-000398
1.00
CCI-000399
1.00

+66 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (7) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-251375r853654_ruleCurrent and previous network element configurations must be stored in a secured location.
0.50
SV-259903r1173929_ruleAn inventory of authorized instruments must be documented and maintained in support of the detection of unauthorized instruments connected to the Enterprise Voice, Video, and Messaging system.
0.50
SV-259904r1173930_ruleCustomers of the DISN VoSIP service must use address blocks assigned by the DRSN/VoSIP PMO.
0.50
SV-259905r1173931_ruleVoice networks must not be bridged via a Unified Capability (UC) soft client accessory.
0.50
SV-259906r1173932_ruleWhen soft-phones are implemented as the primary voice endpoint in the user's workspace, a policy must be defined to supplement with physical hardware-based phones near all such workspaces.
0.50
SV-259907r1173933_ruleImplementing Unified Capabilities (UC) soft clients as the primary voice endpoint must have authorizing official (AO) approval.
0.50
SV-259908r1173934_ruleDeploying Unified Capabilities (UC) soft clients on DOD networks must have authorizing official (AO) approval.
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.