NIST SP 800-66 Rev 2
Technical

NIST SP 800-66 Rev 2 164.312(a)(1): Access Control (Standard)

Implement technical policies and procedures to allow only authorized persons or software programs access to ePHI. NIST recommends identity, authentication, authorization, and session management aligned to SP 800-53 AC family.

Other controls in Technical

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.