Benchmark: 164.314(b)(2) Implementation specifications


The plan documents of the group health plan must be amended to incorporate provisions to require the plan sponsor to — (i) Implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the electronic protected health information that it creates, receives, maintains, or transmits on behalf of the group health plan; (ii) Ensure that the adequate separation required by 164.504(f)(2)(iii) is supported by reasonable and appropriate security measures; (iii) Ensure that any agent, including a subcontractor, to whom it provides this information agrees to implement reasonable and appropriate security measures to protect the information; and (iv) Report to the group health plan any security incident of which it becomes aware.


Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-aws-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 164.314(b)(2) Implementation specifications.

Run this benchmark in your terminal:

powerpipe benchmark run aws_compliance.benchmark.hipaa_security_rule_2003_164_314_b_2

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run aws_compliance.benchmark.hipaa_security_rule_2003_164_314_b_2 --share