OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.316

164.316(b)(2)(i)

paragraph (action item)

Time limit (Required). Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.

164.316 Policies and procedures and documentation requirements.

Related Frameworks

1 mapping across 5 frameworks
SCF1 mapping
DCH-18Media & Data Retention
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (66) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-20Use of External Systems
1.00
AC-20(1)Limits on Authorized Use
1.00
AC-4(25)Data Sanitization
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-3(6)Transfer Authorizations
1.00
CM-1Policy and Procedures
1.00
CM-13Data Action Mapping
1.00

+56 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.8.7
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (7) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-001315
0.50
CCI-001678
0.50
CCI-002581
0.50
CCI-002582
0.50
CCI-002583
0.50
CCI-002584
0.50
CCI-002585
0.50
STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-275585r1147805_ruleUbuntu OS must configure "/var/log/syslog" file with mode "640" or less permissive.
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.