HIPAA Security Rule — 45 CFR Part 164

Technical Safeguards Coverage

The Windows event codes that give an auditor direct evidence for each event-evidenced HIPAA Security Rule technical safeguard below.

Scope: Covers the five Technical Safeguards standards under 45 CFR §164.312 that are genuinely evidenced by log content — Audit Controls, Unique User Identification, Emergency Access Procedure, Automatic Logoff, and Person or Entity Authentication. The Security Rule's Administrative and Physical Safeguards, encryption, integrity, and transmission-security requirements are documentation, configuration, or process questions — named honestly in the gap section below rather than force-mapped.

Version: Maps the current HIPAA Security Rule (45 CFR Part 164, Subpart C), last substantively revised in 2013 and still in effect. A Notice of Proposed Rulemaking published January 6, 2025 would significantly overhaul this rule — including eliminating the "addressable" implementation-specification category — but remains unfinalized as of this writing, with OCR's own target repeatedly slipping (most recently to July 2027). This page maps the rule as currently in force, not the proposal.