HIPAA Security Rule

1. Security Rule summary

   Administrative, physical and technical safeguards for ePHI.

2. Risk analysis guidance

   Required risk analysis steps and documentation.

3. Technical safeguards

   Access control, audit controls, integrity, authentication and transmission security.

4. Cloud computing

   Cloud service providers as business associates and shared responsibility.

5. NIST SP 800-66

   Implementing the HIPAA Security Rule with NIST guidance.

6. 45 CFR Part 164 Subpart C

   Regulation text with required and addressable specifications.

7. Audit protocol

   OCR audit protocol for security controls.

8. NIST CSF crosswalk

   Mapping of NIST CSF subcategories to Security Rule standards.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.