§164.312(b) Audit controls

Mapped across 11 provisions

Equivalent and related requirements in other frameworks and regulations.

• NIST 800-53EquivalentOfficial mapping

  Source: HIPAA Security Rule / NIST SP 800-53 Rev. 5

  AU-2 Event logging

  Logging, monitoring & detection

• CIS Controls v8EquivalentCurated
  8.1 Establish and maintain an audit log management process

  Logging, monitoring & detection

• DORAPartialCurated
  Art. 10 Detection

  Logging, monitoring & detection

• GLBAEquivalentCurated
  §314.4(c)(8) Monitoring and logging of authorized user activity

  Logging, monitoring & detection

• ISO 27001EquivalentCurated
  A.8.16 Monitoring activities

  Logging, monitoring & detection

• ISO 27001EquivalentCurated
  A.8.15 Logging

  Logging, monitoring & detection

• NIST 800-171EquivalentCurated
  3.3.1 Create and retain audit logs

  Logging, monitoring & detection

• NIST CSF 2.0EquivalentCurated
  DE.CM-01 Networks and services monitored

  Logging, monitoring & detection

• NIST CSF 2.0EquivalentCurated
  PR.PS-04 Log records generated for monitoring

  Logging, monitoring & detection

• PCI DSSEquivalentCurated
  Req. 10 Log and monitor all access to system components and cardholder data

  Logging, monitoring & detection

• SOC 2EquivalentCurated
  CC7.2 Security event monitoring

  Logging, monitoring & detection