HIPAA · Administrative safeguards

§164.308(a)(1) Security management process

Implement policies to prevent, detect, contain and correct security violations, including a risk analysis and risk management.

Mapped across 7 provisions

Equivalent and related requirements in other frameworks and regulations.

NIST 800-53EquivalentOfficial mapping
Source: HIPAA Security Rule / NIST SP 800-53 Rev. 5
RA-3 Risk assessment
Risk assessment & management
CCPA / CPRARelatedCurated
§1798.150 Duty to implement reasonable security
Risk assessment & management
DORARelatedCurated
Art. 6 ICT risk management framework
Risk assessment & management
LGPDRelatedCurated
Art. 46 Security measures
Risk assessment & management
NIS2RelatedCurated
Art. 21(2)(a) Risk analysis and information system security policies
Risk assessment & management
NIST 800-171RelatedCurated
3.11.1 Periodically assess risk
Risk assessment & management
NIST CSF 2.0RelatedCurated
ID.RA-01 Vulnerabilities identified and recorded
Risk assessment & management