HIPAA compliance

Whitepaper

January 2024

Contents

SECURITYGOVERNANCE

HIPAA Administrative Safeguards Security Management Process Assigned Security Responsibility

Information Access Management
Security Awareness and Training
Security Incident Procedures

Business Associates Contracts and Other Arrangements
HIPAA Physical Safeguards
Facility Access Controls
Workstation use & Workstation Security
Device and Media Controls
HIPAA Technical Safeguards

OVERVIEW 5

HIPAA Compliance Overview

U.S. Department of Health and Human Services (HHS) to develop regulations protecting the privacy and security of certain health information. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the Secretary of the

HIPAA Security Governance

An important step in securing electronic Protected Health Information (ePHI) is to implement reasonable

SECURITYGOVERNANCE

Security Management Process

Security Awareness and Training

Information Access Management

Security Incident Procedures

Contingency Plan

Business Associates Contracts and Other Arrangements

HIPAA Physical Safeguards

Facility Access Controls

Workstation use & Workstation Security

Device and Media Controls

HIPAA Organizational Requirements

Policies & Procedures and Documentation

SECURITYSOLUTIONS

Cloud Infrastructure

Web Application Firewall - WAF

Server Load Balancer - SLB

Security Solutions

Auth Hub - Authentication & Authority

Audit Trail - Audit Controls

Monitor & Log Services

Performance & Business Monitor Service

Appendix A – HIPAA SAFEGUARD AND SOLUTION MAPPING

Document notes

Customers are responsible for making their own independent assessment of the information in this document. This document is not part of, nor does it modify, any agreement between AlphaLife Sciences and its customers.