Environmental threats, such as power surges and outages of heating, air conditioning, and air • filtration systems, which can enable humidity and dust to compromise the functional integrity and performance of your practice’s information systems. Examples of Safeguards: Below are some potential safeguards to use against possible threats/vulnerabilities. NOTE: The safeguards you choose will depend on the degree of risk and the potential harm that the threat/vulnerability poses to you and the individuals who are the subjects of the ePHI. Have policies and procedures that are designed to control physical access to information systems that have ePHI, including the facilities and rooms within them where your information systems are located. [45 CFR §164.310(a)(1)] Remain current on your practice’s physical and environmental protection needs so that your supporting polices are responsive. [NIST SP 800-53 PE-1] PH4 - §164.310(a)(1) Standard Do you have physical protections in place to manage physical security risks, such as a) locks on doors and windows and b) cameras in nonpublic areas to monitor all entrances and exits? Yes No If no, please select from the following: Cost Practice Size Complexity
• Environmental threats, such as power surges and outages of heating, air conditioning, and air filtration systems, which can enable humidity and dust to compromise the functional integrity and performance of your practice’s information systems. Examples of Safeguards: Below are some potential safeguards to use against possible threats/vulnerabilities. NOTE: The safeguards you choose will depend on the degree of risk and the potential harm that the threat/vulnerability poses to you and the individuals who are the subjects of the ePHI. Have policies and procedures that are designed to control physical access to information systems that have ePHI, including the facilities and rooms within them where your information systems are located. [45 CFR §164.310(a)(1)] Remain current on your practice’s physical and environmental protection needs so that your supporting polices are responsive. [NIST SP 800-53 PE-1] PH4 - §164.310(a)(1) Standard Do you have physical protections in place to manage physical security risks, such as a) locks on doors and windows and b) cameras in nonpublic areas to monitor all entrances and exits? Yes No If no, please select from the following: Cost Practice Size Complexity
attachment_c_-_20140318_sratool_content_-_physical_volume_v6_clean.docx