How does the Security Rule mandate how EPHI should be protected?
The Security Rule mandates flexible and scalable administrative, physical and technical safeguards that outline technologies, policies, standards and procedures that should be put in place to ensure adequate ongoing protection of EPHI. These safeguards are based upon information security best practices.
