164.308(a)(5) Security Awareness and Training

Implement a security awareness and training program for all members of its workforce (including management).

Implementation Specification Description
164.308(a)(5)(ii)(A) Security Reminders (Addressable)

Periodic security updates.

164.308(a)(5)(ii)(C) Log-In Monitoring (Addressable)

Procedures for monitoring log-in attempts and reporting discrepancies.

164.308(a)(5)(ii)(D) Password Management (Addressable)

Procedures for creating, changing, and safeguarding passwords.