164.308(a)(6) Security Incident Procedures

Implement policies and procedures to address security incidents.

Implementation Specification Description
164.308(a)(6)(ii) Response and Reporting (Required)

Identify and respond to suspected or known security incidents; mitigate, to the extent practicable, harmful effects of security incidents that are known to the covered entity; and document security incidents and their outcomes.