HIPAA/HITECH/Administrative Safeguards/4 of 73
45 C.F.R. 164.308(a)(1)(ii)(C)Sanction policy (Required)
Control family: Administrative Safeguards
Control description
Apply appropriate sanctions against workforce members who fail to comply with the security policies and procedures of the covered entity or business associate.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.