An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

Hash, Joan; Bowen, Pauline; Johnson, L.; Smith, Carla; Steinberg, Daniel

doi:https://doi.org/10.6028/NIST.SP.800-66

SP 800-66

Withdrawn on October 23, 2008. Superseded by SP 800-66 Rev. 1

An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

Documentation

Date Published: March 2005

Author(s)

Joan Hash (NIST), Pauline Bowen (NIST), L. Johnson (NIST), Carla Smith (BAH), Daniel Steinberg (BAH)

Abstract

This Special Publication summarizes the HIPAA security standards and explains some of the structure and organization of the Security Rule. This publication helps to educate readers about information security terms used in the HIPAA Security Rule and to improve understanding of the meaning of the security standards set out in the Security Rule. This publication is also designed to direct readers to helpful information in other NIST publications on individual topics the HIPAA Security Rule addresses. Readers can draw upon these publication for consideration in implementing the Security Rule. This publication is intended as an aid to understanding security concepts discussed in the HIPAA Security Rule and does not supplement, replace, or supersede the HIPAA Security Rule itself.

Keywords

Healthcare; HIPAA; Information Security; security rule

Control Families

Access Control; Audit and Accountability; Awareness and Training; Assessment, Authorization and Monitoring; Contingency Planning; Identification and Authentication; Incident Response; Media Protection; Personnel Security; Physical and Environmental Protection; Planning; Risk Assessment; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
SP 800-66 (DOI)
Local Download

Supplemental Material:
None available

Document History:
03/01/05: SP 800-66