|
|
| Regulation, Specification, or Guidance
|
Requirement
|
|
42 CFR Part 493.1231
45 CFR Part 164.312
45 CFR Part 170.315 (d-9)
ASTM E1578-18 S-4-1
CJIS Security Policy 5.6.4
CJIS Security Policy 5.8.2.1
CJIS Security Policy 5.10.1.2
CJIS Security Policy Appendix G.6
|
35.1 The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
|
|
42 CFR Part 493.1231
45 CFR Part 164.312
45 CFR Part 170.315 (d)
ASTM E1578-18 S-4-2
CJIS Security Policy 5.5.2.4
CJIS Security Policy 5.10.1.2
CJIS Security Policy Appendix G.6
|
35.2 The system should support database encryption and be capable of recording the encryption status of the data contained within.
|
42 CFR Part 493.1231
CJIS Security Policy 5.6.2.2.1
|
35.3 The system should be able to support multifactor authentication.
|
45 CFR Part 170.202
45 CFR Part 170.315 (h)
|
35.4 The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.
|
