(d)(1) Standard: Device and media controls. Implement policies and procedures that govern the receipt and removal of hardware and electronic media that contain electronic protected health information into and out of a facility, and the movement of these items within the facility.
The Device and media controls standard has four (4) Implementation specifications:
- (i) Disposal (Required). I
- (ii) Media re-use (Required).
- (iii) Accountability (Addressable).
- (iv) Data backup and storage (Addressable).