HIPAA Glossary · Security Rule concepts
Administrative safeguards
The management layer of the Security Rule — risk analysis, workforce security, training, incident procedures, contingency planning, evaluation.
Context
Nine standards at §164.308. The largest safeguard category by volume and where most findings occur, because administrative safeguards are things the organisation does on a calendar rather than things it buys. See [the administrative safeguards guide](/guides/hipaa-administrative-safeguards/).
Related terms
- Physical safeguards — Facility access controls, workstation security, and device and media controls, including disposal.
- Technical safeguards — Access control, audit controls, integrity, authentication, and transmission security for ePHI.
- Risk analysis — The accurate, thorough assessment of risks to all ePHI the organisation holds — the foundational Security Rule requirement.
- Security Rule — The HIPAA regulation requiring administrative, physical, and technical safeguards for ePHI.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.