OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.312

164.312(e)(2)(i)

paragraph (action item)

Integrity controls (Addressable). Implement security measures to ensure that electronically transmitted electronic protected health information is not improperly modified without detection until disposed of.

164.312 Technical safeguards.

Related Frameworks

3 mappings across 5 frameworks
SCF3 mappings
CFG-02Secure Baseline Configurations
1.00
CRY-04Transmission Integrity
1.00
NET-01Network Security Controls (NSC)
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11(1)Pattern-hiding Displays
1.00
AC-12Session Termination
1.00
AC-17(2)Protection of Confidentiality and Integrity Using Encryption
1.00
AC-18(1)Authentication and Encryption
1.00
AC-18(3)Disable Wireless Networking
1.00
AC-18(4)Restrict Configurations by Users
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(5)Inactivity Logout
1.00
AC-2(7)Privileged User Accounts
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (24) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.13.1
1.00
3.13.10
1.00
3.13.11
1.00
3.13.2
1.00
3.13.4
1.00
3.13.5
1.00
3.13.8
1.00

+14 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000008
1.00
CCI-000010
1.00
CCI-000011
1.00
CCI-000012
1.00
CCI-000162
1.00
CCI-000163
1.00
CCI-000164
1.00
CCI-000213
1.00
CCI-000257
1.00
CCI-000258
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-205728r1000127_ruleWindows Server 2019 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
0.50
SV-205844r991589_ruleWindows Server 2019 users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.
0.50
SV-205845r991589_ruleWindows Server 2019 administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.
0.50
SV-205846r991589_ruleWindows Server 2019 members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.
0.50
SV-205853r991589_ruleWindows Server 2019 FTP servers must be configured to prevent anonymous logons.
0.50
SV-205854r991589_ruleWindows Server 2019 FTP servers must be configured to prevent access to the system drive.
0.50
SV-205860r991589_ruleWindows Server 2019 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes.
0.50
SV-205873r991589_ruleWindows Server 2019 must prevent attachments from being downloaded from RSS feeds.
0.50
SV-205914r991589_ruleWindows Server 2019 must not allow anonymous enumeration of Security Account Manager (SAM) accounts.
0.50
SV-205915r991589_ruleWindows Server 2019 must be configured to prevent anonymous users from having the same permissions as the Everyone group.
0.50

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.