What are the specifics of the Act?
There are four categories and the core requirements: a. Administrative Procedures – Certification – Business Associate Agreement – Contingency plan – Formal mechanism for processing records – Information access control – Internal audit – Personnel security – Security configuration management – Security incident procedures – Termination procedures – Training b. Physical Safeguards – Assigned security responsibilities – Media controls – Physical access controls – Policy guideline on work station use – Secure workstation location – Security awareness training c. Technical Security Services -Access control (context based) – Audit controls – Authentication – Authorization control – Cryptography – Unique user identification – Communication network controls d. Technical Security Mechanisms – Communication network controls return to top What are the specifics of the “Administrative Simplification (AS) provisions”? The Administrative Simplification (AS) provisions of the Health Insurance Portab
