The manufacturer provides technical controls that reduce the risk that the confidentiality of health data held on the product or on removable media is compromised, and other data assets such as passwords must also be stored with appropriate confidentiality measures. Encryption is provided for stored health data on the basis of risk analysis; for removable media it protects clinical users and also the manufacturer's service and application engineers who collect clinical data; key management is consistent with conventional use, service access and emergency break-glass access and preferably, or where required, under HDO control; and the encryption method and strength reflect the volume and sensitivity of the data and regional or user requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.