Regulatory Compliance and Security Controls-5

profileLoic@1313
MGT-670-RS-Security-Controls-Mapping-Template.xlsx
Home>Information Systems homework help>Regulatory Compliance and Security Controls-5

HIPAA Controls

Security Controls Mapping Template
Regulatory Compliance Security Controls Safeguard
Rule (i.e., HIPAA: 164.XXX PCI: Section 1.1.4) Description Code (i.e. NIST: AC-4, COBIT: AI6, CIS: CSC 5.1) Title (i.e., NIST: Information Flow Enforcement, COBIT: Manage Changes, CIS: Minimize administrative priv.) Policy or Procedure to Develop for Enforcement
HIPAA: 164.308(a)(1)(ii)(D) Have you implemented procedures to regularly review records of IS activity such as audit logs, access reports, and security incident tracking? (R) NIST: AU-6, AU-7, CA-7, IR-5, IR-6 AU-6: Audit Review, Analysis, and Reporting AU-7: Audit Reduction and Report Generation CA-7: Continuous Monitoring IR-5: Incident Monitoring IR-6: Incident Reporting Information Security Audit Policy