Administrative Safeguards (164.308)

Administrative Safeguards are the policies and procedures required by HIPAA to manage the selection, development, implementation, and maintenance of security measures protecting electronic protected health information. They include risk analysis, workforce training, incident response, and oversight responsibilities. These safeguards ensure that covered entities and business associates establish a security management process and assign a security official.