HIPAA/HITECH/Administrative Safeguards/21 of 73
45 C.F.R. 164.308(a)(6)(ii)Implementation specification: Response and reporting (Required)
Control family: Administrative Safeguards
Control description
Identify and respond to suspected or known security incidents; mitigate, to the extent practicable, harmful effects of security incidents that are known to the covered entity or business associate; and document security incidents and their outcomes.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.