The U.S. Department of Health and Human Services Office for Civil Rights (OCR) released its Summer 2021 Cybersecurity Newsletter. This newsletter, which may be accessed by clicking here suggests that Information Access Management and Access Controls should be implemented to guard against unauthorized access to protected health information.
Information Access Management is an administrative safeguard while Access Controls is a technical safeguard. When taken together, they help secure electronic protected health information to ensure that access to ePHI is given only to authorized individuals.
Employers should review the guidance for suggestions to implement security best practices.