7 Security Requirements Compared FERPA No set, specific requirements No clear consensus in higher ed on what is needed No court decisions on third party breach HIPAA Administrative Safeguards 8 subsections on processes, procedures, and training Risk Analysis is foundation Physical Safeguards 4 sections on facility access, workstation security, and device and media controls Technical Safeguards 5 sections covering mechanisms for Access control, Audit control, Data integrity, Authentication, Transmission security GLB Develop comprehensive security program Risk Assessment Risk Mitigation Assess employee training needs Flow down confidentiality obligations to business partners with access to covered information
{}