73 controls · 7 families Unanswered

Administrative Safeguards31

Open Administrative Safeguards

Physical Safeguards12

Open Physical Safeguards

Technical Safeguards12

Open Technical Safeguards

Organizational Requirements3

Policies and Procedures and Documentation Requirements6

Open Policies and Procedures and Documentation Requirements

Uses and Disclosures of Protected Health Information: General rules6

Open Uses and Disclosures of Protected Health Information: General rules

Uses and Disclosures: Organizational Requirements3

Open Uses and Disclosures: Organizational Requirements

HIPAA/HITECH/Organizational Requirements/56 of 73

45 C.F.R. 164.314(a)(1)Standard: Business associate contracts or other arrangements

Control family: Organizational Requirements

Control description

The contract or other arrangement required by § 164.308(b)(3) must meet the requirements of paragraph (a)(2)(i), (a)(2)(ii), or (a)(2)(iii) of this section, as applicable.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.