OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.314

164.314(a)(2)(i)(C)

paragraph (action item)

Report to the covered entity any security incident of which it becomes aware, including breaches of unsecured protected health information as required by § 164.410.

164.314 Organizational requirements.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
TPM-05.1Security Compromise Notification Agreements
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (15) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

PL-1Policy and Procedures
1.00
SA-1Policy and Procedures
1.00
SA-9External System Services
1.00
SA-9(1)Risk Assessments and Organizational Approvals
1.00
SR-1Policy and Procedures
1.00
SR-8Notification Agreements
1.00
PM-8Critical Infrastructure Plan
0.50
SA-23Specialization
0.50
SA-4Acquisition Process
0.50
SA-9(3)Establish and Maintain Trust Relationship with Providers
0.50

+5 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-005124
1.00
CCI-005125
1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.