HIPAA/HITECH/Administrative Safeguards/5 of 73
45 C.F.R. 164.308(a)(1)(ii)(D)Information system activity review (Required)
Control family: Administrative Safeguards
Control description
Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.