HIPAA
Administrative Safeguards
164.308(b)
4.9. Business Associate Contracts and Other Arrangements (? 164.308(b)(1))
Business associate contracts and other arrangements. A covered entity may permit a business associate to create receive maintain or transmit electronic protected health information on the covered entity’s behalf only if the covered entity obtains satisfactory assurances in accordance with §?164.314(a) that the business associate will appropriately safeguard the information. A covered entity is not required to obtain such satisfactory assurances from a business associate that is a subcontractor.A business associate may permit a business associate that is a subcontractor to create receive maintain or transmit electronic protected health information on its behalf only if the business associate obtains satisfactory assurances in accordance with §?164.314(a) that the subcontractor will appropriately safeguard the information.Implementation specifications: Written contract or other arrangement (Required). Document the satisfactory assurances required by paragraph (b)(1) or (b)(2) of this section through a written contract or other arrangement with the business associate that meets the applicable requirements of §?164.314(a).
Click here to Start your FREE trial today!
What is a Cybersecurity Compliance Framework?
You don’t need to clutter your security and privacy programs with an ever-increasing number of tools as they become more sophisticated. The Lionfish platform offers a one-stop solution to track progress and monitor any framework, from custom-built ones to highly-specialized and in-demand top security and privacy frameworks and certifications.
With the Lionfish platform, every framework is supported with guided scoping, policies, controls, automated evidence collection, and continuous monitoring, ensuring efficient preparation for audits or attestation in minimal time.
The Lionfish platform is compatible with a wide range of security and privacy frameworks, including:
- CMMC v2
- HIPAA
- NERC CIP-002 through CIP-014 Revision 6
- NIST 800-171
- NIST 800-172
- PCI (Payment Card Industry Security Standard)
- SOC 2
- NIST 800-53
- NIST SP800-161 Supply Chain Risk Management
- NIST-CSF
- CIS Framework Controls V8
Click here to Start your FREE trial today!