OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.312

164.312(e)(2)(ii)

paragraph (action item)

Encryption (Addressable). Implement a mechanism to encrypt electronic protected health information whenever deemed appropriate.

164.312 Technical safeguards.

Related Frameworks

3 mappings across 5 frameworks
SCF3 mappings
CFG-02Secure Baseline Configurations
1.00
CRY-01Use of Cryptographic Controls
1.00
OPS-03Service Delivery (Business Process Support)
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11(1)Pattern-hiding Displays
1.00
AC-12Session Termination
1.00
AC-17(2)Protection of Confidentiality and Integrity Using Encryption
1.00
AC-18(1)Authentication and Encryption
1.00
AC-18(3)Disable Wireless Networking
1.00
AC-18(4)Restrict Configurations by Users
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(5)Inactivity Logout
1.00
AC-2(7)Privileged User Accounts
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (25) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.13.1
1.00
3.13.10
1.00
3.13.11
1.00
3.13.16
1.00
3.13.2
1.00
3.13.4
1.00
3.13.5
1.00

+15 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000008
1.00
CCI-000010
1.00
CCI-000011
1.00
CCI-000012
1.00
CCI-000162
1.00
CCI-000163
1.00
CCI-000164
1.00
CCI-000213
1.00
CCI-000257
1.00
CCI-000258
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-203784r991593_ruleThe operating system must enable an application firewall, if available.
0.50
SV-205873r991589_ruleWindows Server 2019 must prevent attachments from being downloaded from RSS feeds.
0.50
SV-205914r991589_ruleWindows Server 2019 must not allow anonymous enumeration of Security Account Manager (SAM) accounts.
0.50
SV-216073r959010_ruleAny X Windows host must write .Xauthority files.
0.50
SV-216077r959010_rule.Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.
0.50
SV-216140r959010_ruleThe system must disable TCP reverse IP source routing.
0.50
SV-216308r959010_ruleAny X Windows host must write .Xauthority files.
0.50
SV-216312r959010_rule.Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server.
0.50
SV-221871r991589_ruleThe Oracle Linux operating system must not contain shosts.equiv files.
0.50
SV-222627r961863_ruleThe ISSO must ensure if a DoD STIG or NSA guide is not available, a third-party product will be configured by following available guidance.
0.50

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.