STIGViewer Support

164.314(b)(2)(iii)

paragraph (action item)

Ensure that any agent to whom it provides this information agrees to implement reasonable and appropriate security measures to protect the information; and

164.314 Organizational requirements.

Related Frameworks

1 mapping across 4 frameworks
SCF1 mapping
TPM-05Third-Party Contract Requirements
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (88) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-2(7)Privileged User Accounts
1.00
AC-20Use of External Systems
1.00
AC-20(1)Limits on Authorized Use
1.00
AC-20(3)Non-organizationally Owned Systems — Restricted Use
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-3(6)Transfer Authorizations
1.00
CM-1Policy and Procedures
1.00

+78 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.