What are the mandatory logging and auditing features required for HIPAA compliant cloud storage to satisfy a standard security review?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What are the mandatory logging and auditing features required for HIPAA compliant cloud storage to satisfy a standard security review?
3 real searches · 1 real-search pass
HHS HIPAA Security Rule audit controls 164.312(b) information system activity review 164.308 official guidanceGoogle ↗
OBSERVED
eCFR 45 CFR 164.316 documentation retention six years HIPAA Security RuleGoogle ↗
OBSERVED
HHS HIPAA cloud computing guidance business associate agreement security rule audit logsGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 3 queries…
Searches and sources
ChatGPT3 real searches · gpt-6
HHS HIPAA Security Rule audit controls 164.312(b) information system activity review 164.308 official guidance Google ↗
eCFR 45 CFR 164.316 documentation retention six years HIPAA Security Rule Google ↗
HHS HIPAA cloud computing guidance business associate agreement security rule audit logs Google ↗
- Audit Protocol – Updated July 2018 · hhs.gov
- hhs.gov · hhs.gov
- 45 CFR § 164.312 - Technical safeguards. | Electronic Code of Federal Regulations (e-CFR) | US Law · law.cornell.edu
- 45 CFR § 164.308 - Administrative safeguards. | Electronic Code of Federal Regulations (e-CFR) | US Law · law.cornell.edu
- 45 CFR 164.316 | Policies and procedures and… · ecfr.io
- 45 CFR § 164.316 - Policies and procedures and documentation requirements. | Electronic Code of Federal Regulations (e-CFR) | US Law · law.cornell.edu
- Guidance on HIPAA & Cloud Computing · hhs.gov
- May a HIPAA covered entity or business associate use a cloud service to store or process ePHI? · hhs.gov
- Do the HIPAA Rules require CSPs that are business associates to provide documentation, or allow auditing, of their security practices by their customers who are covered entities or business associates? · hhs.gov
Queries
3 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
HHS HIPAA Security Rule audit controls 164.312(b) information system activity review 164.308 official guidance OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
eCFR 45 CFR 164.316 documentation retention six years HIPAA Security Rule OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
HHS HIPAA cloud computing guidance business associate agreement security rule audit logs OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |