Transmission Security

frameworkHIPAA Security Rule section§164.312 Technical safeguards csf 2.0PR.DS-02 topics— frameworks1 0 1

Official textImplement technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.45 CFR Part 164 Subpart C, via NIST SP 800-66r2 (public domain)

gap from HIPAA → gap to HIPAA →

Wrong or missing mapping? Report it

Equivalents of §164.312(e)(1) in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	PR.DS-02	The confidentiality, integrity, and availability of data-in-transit are protected	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping
ISO 27001	A.5.3 A.5.10 A.5.13 A.5.14	Segregation of duties; Acceptable use of information and other associated assets…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +14 more loosely related (not mappings) A.5.15 Access control Loosely related Only shares CSF PR.DS-02: related, not a mapping A.6.1 Screening Loosely related Only shares CSF PR.DS-02: related, not a mapping A.6.2 Terms and conditions of employment Loosely related Only shares CSF PR.DS-02: related, not a mapping A.6.5 Responsibilities after termination or change of employment Loosely related Only shares CSF PR.DS-02: related, not a mapping …and 10 more in the downloads
CIS v8.1	CIS 3.10 CIS 3.1 CIS 3.4 CIS 3.5	Encrypt Sensitive Data in Transit; Establish and Maintain a Data Management Process…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +9 more loosely related (not mappings) CIS 3.6 Encrypt Data on End-User Devices Loosely related Only shares CSF PR.DS-02: related, not a mapping CIS 3.9 Encrypt Data on Removable Media Loosely related Only shares CSF PR.DS-02: related, not a mapping CIS 3.12 Segment Data Processing and Storage Based on Sensitivity Loosely related Only shares CSF PR.DS-02: related, not a mapping CIS 3.13 Deploy a Data Loss Prevention Solution Loosely related Only shares CSF PR.DS-02: related, not a mapping …and 5 more in the downloads
SOC 2	C1.2 CC6.1 CC6.5 CC6.7	Disposing of confidential information; Logical access security over information assets…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +1 more loosely related (not mappings) CC6.8 Preventing or detecting unauthorized or malicious software Loosely related Only shares CSF PR.DS-02: related, not a mapping
PCI DSS	2.3.1 4.2.1 12.3.3 3.4.2	Wireless vendor defaults changed; Strong cryptography for PAN over open, public networks…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +4 more loosely related (not mappings) 3.7.1 Key management: strong key generation Loosely related Only shares CSF PR.DS-02: related, not a mapping 3.7.4 Key management: key changes at end of cryptoperiod Loosely related Only shares CSF PR.DS-02: related, not a mapping 4.2.1.1 Inventory of trusted keys and certificates kept Loosely related Only shares CSF PR.DS-02: related, not a mapping 5.4.1 Mechanisms to detect and protect against phishing Loosely related Only shares CSF PR.DS-02: related, not a mapping
CMMC	AC.L2-3.1.13 MP.L2-3.8.6 SC.L2-3.13.1 SC.L2-3.13.2	Remote Access Confidentiality; Portable Storage Encryption…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +14 more loosely related (not mappings) SC.L2-3.13.4 Shared Resource Control Loosely related Only shares CSF PR.DS-02: related, not a mapping SC.L2-3.13.5 Public-Access System Separation Loosely related Only shares CSF PR.DS-02: related, not a mapping SC.L2-3.13.6 Network Communication by Exception Loosely related Only shares CSF PR.DS-02: related, not a mapping SC.L2-3.13.8 Data in Transit Loosely related Only shares CSF PR.DS-02: related, not a mapping …and 10 more in the downloads
800-53	SC-8	Transmission Confidentiality and Integrity	Crosswalk	NIST HIPAA → SP 800-53 crosswalk 15 loosely related (not mappings) AU-16 Cross-organizational Audit Logging Loosely related Only shares CSF PR.DS-02: related, not a mapping CA-3 Information Exchange Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-4 Information in Shared System Resources Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-7 Boundary Protection Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-11 Trusted Path Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-12 Cryptographic Key Establishment and Management Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-13 Cryptographic Protection Loosely related Only shares CSF PR.DS-02: related, not a mapping SC-16 Transmission of Security and Privacy Attributes Loosely related Only shares CSF PR.DS-02: related, not a mapping …and 7 more in the downloads
GDPR	Art.5(1)(e)Art.5(1)(f)Art.32(1)(a)Art.32(1)(b)	Principles relating to processing of personal data; Principles relating to processing of personal data…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +1 more loosely related (not mappings) Art.34(3)(a) Communication of a personal data breach to the data subject Loosely related Only shares CSF PR.DS-02: related, not a mapping
NIS2	9.1	Cryptography	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping
Essential Eight	ISM-1488	Microsoft Office macros in files originating from the internet are blocked	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping
DORA	Art.9(2)Art.9(3)(a)Art.9(3)(c)Art.9(3)(d)	Protection and prevention; Protection and prevention…	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping +1 more loosely related (not mappings) Art.9(4)(d) Protection and prevention Loosely related Only shares CSF PR.DS-02: related, not a mapping
CPS 234	Para 21	Timely controls commensurate with risk and asset life-cycle	Loosely related	No mapping. Only shares CSF PR.DS-02: related, not a mapping
Cyber Essentials	—	No requirement	No mapping in our data	No mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.