HIPAA/HITECH/Administrative Safeguards/2 of 73
45 C.F.R. 164.308(a)(1)(ii)(A)Risk analysis (Required)
Control family: Administrative Safeguards
Control description
Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the covered entity or business associate.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.