HIPAA/HITECH/Administrative Safeguards/14 of 73
45 C.F.R. 164.308(a)(4)(ii)(C)Access establishment and modification (Addressable)
Control family: Administrative Safeguards
Control description
Implement policies and procedures that, based upon the entity’s access authorization policies, establish, document, review, and modify a user’s right of access to a workstation, transaction, program, or process.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.