An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

Scholl, Matthew; Stine, Kevin; Hash, Joan; Bowen, Pauline; Johnson, L.; Smith, Carla; Steinberg, Daniel

doi:https://doi.org/10.6028/NIST.SP.800-66r1

SP 800-66 Rev. 1

An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

Documentation Topics

Date Published: October 2008

Supersedes: SP 800-66 (03/01/2005)

Author(s)

Matthew Scholl (NIST), Kevin Stine (NIST), Joan Hash (NIST), Pauline Bowen (NIST), L. Johnson (NIST), Carla Smith (BAH), Daniel Steinberg (BAH)

Abstract

Special Publication 800-66 Rev. 1, An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, which discusses security considerations and resources that may provide value when implementing the requirements of the HIPAA Security Rule, was written to help educate readers about information security terms used in the HIPAA Security Rule and to improve understanding of the meaning of the security standards set out in the Security Rule, direct readers to helpful information in other NIST publications on individual topics the HIPAA Security Rule addresses, and aid readers in understanding the security concepts discussed in the HIPAA Security Rule. This publication does not supplement, replace, or supersede the HIPAA Security Rule itself.

Keywords

HIPAA; security rule; Healthcare; Information Security

Control Families

Access Control; Audit and Accountability; Awareness and Training; Assessment, Authorization and Monitoring; Contingency Planning; Identification and Authentication; Incident Response; Media Protection; Personnel Security; Physical and Environmental Protection; Planning; Risk Assessment; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
SP 800-66 Rev. 1 (DOI)
Local Download

Supplemental Material:
None available

Related NIST Publications:
SP 800-66 Rev. 2 (Draft)

Document History:
10/23/08: SP 800-66 Rev. 1 (Final)

Topics

Security and Privacy
acquisition; awareness training & education

Laws and Regulations
Health Insurance Portability and Accountability Act

Sectors
healthcare