OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.312

164.312(a)(2)(iv)

paragraph (action item)

Encryption and decryption (Addressable). Implement a mechanism to encrypt and decrypt electronic protected health information.

164.312 Technical safeguards.

Related Frameworks

1 mapping across 5 frameworks
SCF1 mapping
CRY-01Use of Cryptographic Controls
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-14Permitted Actions Without Identification or Authentication
1.00
AC-2Account Management
1.00
AC-3Access Enforcement
1.00
AC-4Information Flow Enforcement
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
AU-12Audit Record Generation
1.00
AU-13Monitoring for Information Disclosure
1.00
AU-16Cross-organizational Audit Logging
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (20) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.13.1
1.00
3.13.10
1.00
3.13.11
1.00
3.13.16
1.00
3.13.2
1.00
3.13.4
1.00
3.13.5
1.00

+10 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000257
1.00
CCI-000258
1.00
CCI-000259
1.00
CCI-000260
1.00
CCI-000534
1.00
CCI-000535
1.00
CCI-000536
1.00
CCI-000537
1.00
CCI-000538
1.00
CCI-000539
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-203749r1117271_ruleThe operating system must implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
0.50
SV-203749r971547_ruleThe operating system must implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
0.50
SV-204818r1137581_ruleThe application server must employ approved cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
0.50
SV-204818r961635_ruleThe application server must employ approved cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
0.50
SV-205217r1137675_ruleThe DNS server implementation must implement cryptographic mechanisms to detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
0.50
SV-205217r961635_ruleThe DNS server implementation must implement cryptographic mechanisms to detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
0.50
SV-205820r958908_ruleWindows Server 2019 domain controllers must require LDAP access signing.
0.50
SV-207561r879599_ruleThe BIND 9.x server implementation must uniquely identify and authenticate the other DNS server before responding to a server-to-server transaction, zone transfer and/or dynamic update request using cryptographically based bidirectional authentication to protect the integrity of the information in transit.
0.50
SV-213548r961635_ruleJBoss must be configured to use an approved cryptographic algorithm in conjunction with TLS.
0.50
SV-214196r612370_ruleThe Infoblox system must implement cryptographic mechanisms to detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
0.50

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.