Security Requirements -- Physical Controls.

22 CCR 126074

Source text

4 segments

22 CCR 126074

§ 126074. Security Requirements -- Physical Controls.

(a)

Mobile Electronic Device Controls. A Demonstration Project Participant shall limit and protect any storage of IHI on mobile electronic computing devices and passive storage media. A Demonstration Project Participant shall limit and protect any storage of IHI on mobile electronic computing devices and passive storage media. A Demonstration Project Participant shall have a policy directing all workforce members, using entity-issued or any non-managed (user-owned) devices or media, to adhere to the entity mobile electronic computing device requirements. Storage of IHI on mobile computing devices and passive storage media is prohibited unless the devices or IHI:

(1)

Are encrypted where indicated by risk assessment, and

(2)

Legacy medical devices may require alternative controls in lieu of standard controls as allowed by device manufacturers, such deviations from standard controls shall be documented.

Source outline

3 anchors in this source