// Healthcare
HIPAA Compliance Software
US Health Insurance Portability and Accountability Act. Privacy and security of protected health information.
Framework at a glance
Short name
HIPAA
Version
2013
Category
Healthcare
Controls
73
What HIPAA covers
73 controls across 30 domains — every one tracked, owned and evidenced in Cyber Horizon.
Patient Rights
7 controls- PR.1 Notice of Privacy Practices
- PR.3 Individual Access Rights
- PR.4 Amendment of PHI
- PR.6 Right to Restrict Disclosures
- PR.7 Confidential Communications
Data Minimisation
1 controls- PR.2 Minimum Necessary Standard
Transparency
1 controls- PR.5 Accounting of Disclosures
Third-Party Management
4 controls- PR.8 Business Associate Agreements
- SR.24 Business Associate Contracts
- BR.6 Business Associate Breach Reporting
- OM.8 Subcontractor BAAs
Data Management
1 controls- PR.9 De-identification of PHI
Consent
4 controls- PR.10 Marketing and Fundraising Restrictions
- PR.11 Sale of PHI
- OM.4 Research Authorisations
- OM.6 Fundraising Opt-Out
Training
3 controls- PR.12 Workforce Training
- SR.12 Security Awareness Training
- SR.13 Security Reminders
Risk Management
5 controls- SR.1 Security Management Process
- SR.2 Risk Analysis
- SR.3 Risk Management
- SR.22 Applications and Data Criticality Analysis
- BR.2 Breach Risk Assessment
Policy
1 controls- SR.4 Sanction Policy
Monitoring
2 controls- SR.5 Information System Activity Review
- SR.15 Log-in Monitoring
Governance
2 controls- SR.6 Assigned Security Responsibility
- OM.1 HIPAA Privacy Officer
Access Control
9 controls- SR.7 Workforce Authorisation
- SR.8 Workforce Clearance
- SR.9 Workforce Termination
- SR.10 Access Authorisation
- SR.11 Access Establishment and Modification
Malware Protection
1 controls- SR.14 Protection from Malicious Software
Business Continuity
4 controls- SR.17 Contingency Plan
- SR.19 Disaster Recovery Plan
- SR.20 Emergency Mode Operation Plan
- SR.26 Contingency Operations
Backup
2 controls- SR.18 Data Backup Plan
- SR.36 Data Backup and Storage
Testing
1 controls- SR.21 Testing and Revision Procedures
Audit
1 controls- SR.23 Evaluation
Physical Security
3 controls- SR.25 Facility Access Controls
- SR.27 Facility Security Plan
- SR.28 Access Control and Validation
Asset Management
5 controls- SR.29 Maintenance Records
- SR.32 Device and Media Controls
- SR.33 Disposal
- SR.34 Media Re-use
- SR.35 Accountability
Endpoint Security
2 controls- SR.30 Workstation Use
- SR.31 Workstation Security
Cryptography
3 controls- TC.4 Encryption and Decryption
- TC.8 Transmission Security
- TC.9 Encryption of ePHI in Transit
Logging
1 controls- TC.5 Audit Controls
Data Integrity
1 controls- TC.6 Integrity Controls
Authentication
1 controls- TC.7 Authentication
Incident Management
1 controls- BR.1 Breach Discovery
Notification
3 controls- BR.3 Individual Notification
- BR.4 Media Notification
- BR.5 HHS Notification
Documentation
1 controls- BR.7 Breach Documentation
Special Categories
1 controls- OM.3 Genetic Information Protections
Disclosures
1 controls- OM.5 Student Immunisation Records
Regulatory
1 controls- OM.7 Enhanced Enforcement
How Cyber Horizon automates HIPAA
Every HIPAA control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is HIPAA?
US Health Insurance Portability and Accountability Act. Privacy and security of protected health information.
How many controls does HIPAA have?
HIPAA (2013) has 73 controls in Cyber Horizon's catalogue, organised across 30 domains.
How does Cyber Horizon help with HIPAA?
Cyber Horizon maps HIPAA into a shared control library alongside every other framework you run, so evidence collected once counts towards HIPAA and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Healthcare frameworks
See HIPAA mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of HIPAA in Cyber Horizon.