Privacy & security

NIST SP 800-66

NIST Special Publication 800-66 Rev. 2 — Implementing the HIPAA Security Rule

National Institute of Standards and TechnologyLatest · Revision 2 (2024)

Scope

NIST's implementation guidance for the HIPAA Security Rule. It maps the Security Rule's administrative, physical, and technical safeguards to the NIST Cybersecurity Framework and provides concrete controls for covered entities.

Where it applies in the room

  • Risk analysis and management programs
  • Access control, audit, integrity, and transmission security

Source & further reading

Also known as

  • NIST SP 800-66r2
  • NIST SP 800-66
  • SP 800-66

Help us improve

Spotted something wrong, outdated, or unclear? Let the editors know.