Showing 1 ideas for tag "mandatory"
kudos icon +

Developers and HIPAA

Scanning and Penetration Testing Implemented

Do entities need to run internal and external vulnerability scanning be HIPAA compliant? Do entities have to run penetration tests to ensure compliance? Reading ยง164.312(e)(2)(i) it seems that 'security measures' could include these tests, but does not specify a requirement for it.

Additionally, a risk analysis could identify that these services would help to reduce the risk, threats and vulnerabilities in-scope systems,... more »


2 votes
2 up votes
0 down votes