HIPAA Security Compliance: What is Your Sanction Policy?

by Bevon Findley (SU)
Sanction policy? It sounds like what one country would do to another country to apply political pressure. Regrettably, that is the terminology the government is using when it comes to this section of HIPAA Security Rule compliance. The sanction policy (CFR 164.308(a)(1)(iii)(C) must be part of the overall security management process.