73 controls · 7 families Unanswered

Administrative Safeguards31

Open Administrative Safeguards

Physical Safeguards12

Open Physical Safeguards

Technical Safeguards12

Open Technical Safeguards

Organizational Requirements3

Open Organizational Requirements

Policies and Procedures and Documentation Requirements6

Open Policies and Procedures and Documentation Requirements

Uses and Disclosures of Protected Health Information: General rules6

Open Uses and Disclosures of Protected Health Information: General rules

Uses and Disclosures: Organizational Requirements3

HIPAA/HITECH/Uses and Disclosures: Organizational Requirements/71 of 73

45 C.F.R. 164.504(e)(1)(iii)Standard: Business associate contracts

Control family: Uses and Disclosures: Organizational Requirements

Control description

A business associate is not in compliance with the standards in § 164.502(e) and this paragraph, if the business associate knew of a pattern of activity or practice of a subcontractor that constituted a material breach or violation of the subcontractor's obligation under the contract or other arrangement, unless the business associate took reasonable steps to cure the breach or end the violation, as applicable, and, if such steps were unsuccessful, terminated the contract or arrangement, if feasible.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.