73 controls · 7 families Unanswered

Administrative Safeguards31

Open Administrative Safeguards

Physical Safeguards12

Open Physical Safeguards

Technical Safeguards12

Open Technical Safeguards

Organizational Requirements3

Open Organizational Requirements

Policies and Procedures and Documentation Requirements6

Open Policies and Procedures and Documentation Requirements

Uses and Disclosures of Protected Health Information: General rules6

Open Uses and Disclosures of Protected Health Information: General rules

Uses and Disclosures: Organizational Requirements3

HIPAA/HITECH/Uses and Disclosures: Organizational Requirements/73 of 73

45 C.F.R. 164.504(e)(5)Implementation specifications: Business associate contracts with subcontractors

Control family: Uses and Disclosures: Organizational Requirements

Control description

The requirements of § 164.504(e)(2) through (e)(4) apply to the contract or other arrangement required by § 164.502(e)(1)(ii) between a business associate and a business associate that is a subcontractor in the same manner as such requirements apply to contracts or other arrangements between a covered entity and business associate.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.