NIST SP 800-66

NIST SP 800-66 is a publication from the National Institute of Standards and Technology (NIST) that provides guidance on how to comply with the technical requirements of the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.

The Security Rule requires healthcare providers, health plans, and healthcare clearinghouses to ensure the confidentiality, integrity, and availability of protected health information (PHI).

NIST SP 800-66 is specifically designed to help covered entities and their business associates implement the security controls required by the HIPAA Security Rule. The publication provides:

• Specific guidance for implementing each of the security standards and implementation specifications
• Technical recommendations for configuring systems, implementing security controls, and monitoring and maintaining compliance
• Examples of how to implement the security standards in various settings, such as electronic health records systems and wireless networks