Disclose and operate protected health information (PHI) data handling + storage confidentiality + transmission confidentiality and integrity per MDS2 DATA + STCF + TXCF + TXIG sections. Protected Health Information Handling (DATA) including PHI inventory + minimum necessary standard + de-identification capability + anonymisation + pseudonymisation + HIPAA Safe Harbor / Expert Determination support. Health Data Storage Confidentiality (STCF) including encryption at rest + FIPS 140-2/140-3 validated cryptographic modules + AES-256 + key management + hardware security module (HSM) support + database encryption + filesystem encryption. Transmission Confidentiality (TXCF) including encryption in transit + TLS 1.2 minimum (1.3 preferred) + IPSec + DICOM TLS + HL7 over TLS + SFTP/SCP + secure email + VPN support. Transmission Integrity (TXIG) including message authentication codes + digital signatures + checksums + sequence numbers + replay protection + NTP time synchronisation + clinical-data integrity protections. Inter-device communication security + middleware integration + interface engine security + DICOM Secure Use Profile + HL7 FHIR security + IHE Audit Trail and Node Authentication (ATNA) profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.