R200. Keep record of foreign devices

Requirement

The organization must keep a record of all foreign devices entered and withdrawn of the facilities.

References

  1. HIPAA Security Rules 164.310(d)(1): Device and Media Controls: Implement policies and procedures that govern the receipt and removal of hardware and electronic media that contain electronic protected health information into and out of a facility, and the movement of these items within the facility.

  2. HIPAA Security Rules 164.310(d)(2)(iii): Accountability (A): Maintain a record of the movements of hardware and electronic media and any person responsible therefore.

Copyright © 2020 Fluid Attacks, We hack your software. All rights reserved.

Service status - Terms of Use - Privacy Policy - Cookie Policy