The technology and the policy and procedures for its use that protect electronic protected health information and control access to it.
Sources:
NIST SP 800-66r2
from
HIPAA Security Rule - §164.304