turbot/gcp_compliance

Dashboard: HIPAA

Overview

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that establishes data privacy and security requirements for organizations that are charged with safeguarding individuals' protected health information (PHI). These organizations meet the definition of “covered entities” or “business associates” under HIPAA.

Customers that are subject to HIPAA and want to utilize any Google Cloud products in connection with PHI must review and accept Google's Business Associate Agreement (BAA). Google ensures that the Google products covered under the BAA meet the requirements under HIPAA and align with our ISO/IEC 27001, 27017, and 27018 certifications and SOC 2 report.

The Google Cloud BAA covers Google Cloud’s entire infrastructure (all regions, all zones, all network paths, all points of presence), and the services listed below

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-gcp-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select HIPAA dashboard.

You could also snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe benchmark run gcp_compliance.benchmark.hipaa --share

Benchmark

This dashboard is automatically generated from the following benchmark:

benchmark.hipaa

Tags