Template:LIMSpec/Cybersecurity - Revision history

Shawndouglas: NIST tweak

2023-03-14T22:07:41Z

NIST tweak

← Older revision		Revision as of 22:07, 14 March 2023
Line 20:		Line 20:
	[https://www.ema.europa.eu/en/human-regulatory/research-development/compliance/good-manufacturing-practice/guidance-good-manufacturing-practice-good-distribution-practice-questions-answers EMA Guidance on Good Manufacturing Practice and Good Distribution Practice]<br />		[https://www.ema.europa.eu/en/human-regulatory/research-development/compliance/good-manufacturing-practice/guidance-good-manufacturing-practice-good-distribution-practice-questions-answers EMA Guidance on Good Manufacturing Practice and Good Distribution Practice]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-17(2)]<br />		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-17(2)]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4(6)]		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4(6)]<br />
			[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, SC-8 and SC-8(1)]
	\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.		\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
	\|-		\|-

Shawndouglas: NIST tweak

2023-03-14T19:29:51Z

NIST tweak

← Older revision		Revision as of 19:29, 14 March 2023
Line 19:		Line 19:
	[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.2.3.2]<br />		[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.2.3.2]<br />
	[https://www.ema.europa.eu/en/human-regulatory/research-development/compliance/good-manufacturing-practice/guidance-good-manufacturing-practice-good-distribution-practice-questions-answers EMA Guidance on Good Manufacturing Practice and Good Distribution Practice]<br />		[https://www.ema.europa.eu/en/human-regulatory/research-development/compliance/good-manufacturing-practice/guidance-good-manufacturing-practice-good-distribution-practice-questions-answers EMA Guidance on Good Manufacturing Practice and Good Distribution Practice]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-17(2)]		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-17(2)]<br />
			[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4(6)]
	\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.		\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
	\|-		\|-

Shawndouglas: NIST tweak

2023-03-14T17:27:21Z

NIST tweak

← Older revision		Revision as of 17:27, 14 March 2023
Line 31:		Line 31:
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />
			[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, CP-9(8)]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, SC-13 and SC-28(1)]		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, SC-13 and SC-28(1)]
	\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.		\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.

Shawndouglas: Spacing issues

2023-01-06T16:26:53Z

Spacing issues

← Older revision		Revision as of 16:26, 6 January 2023
Line 34:		Line 34:
	\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.		\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.
	\|-		\|-
	\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />		\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]<br />[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.4.2.2]<br />[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-3]<br />[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, IA-2, IA-2(1–4), and IA-8]<br />[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4]
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]<br />
	[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.4.2.2]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-3]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, IA-2, IA-2(1–4), and IA-8]<br />
	[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4]
	\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.		\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.
	\|-		\|-

Shawndouglas: Updated for 2022.

2022-05-05T20:48:20Z

Updated for 2022.

← Older revision		Revision as of 20:48, 5 May 2022
Line 12:		Line 12:
	[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312]<br />		[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312]<br />
	[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d-9)]<br />		[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d-9)]<br />
	[https://www.astm.org/~~Standards/E1578~~.~~htm~~ ASTM E1578-18 S-4-1]<br />		[https://www.astm.org/e1578-18.html ASTM E1578-18 S-4-1]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.4]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.4]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.8.2.1]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.8.2.1]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />
	[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, AC-17(2)]		[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.2.3.2]<br />
			[https://www.ema.europa.eu/en/human-regulatory/research-development/compliance/good-manufacturing-practice/guidance-good-manufacturing-practice-good-distribution-practice-questions-answers EMA Guidance on Good Manufacturing Practice and Good Distribution Practice]<br />
			[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-17(2)]
	\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.		\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
	\|-		\|-
Line 24:		Line 26:
	[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312]<br />		[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312]<br />
	[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d)]<br />		[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d)]<br />
	[https://www.astm.org/~~Standards/E1578~~.~~htm~~ ASTM E1578-18 S-4-2]<br />		[https://www.acmg.net/ACMG/Medical-Genetics-Practice-Resources/Genetics_Lab_Standards/ACMG/Medical-Genetics-Practice-Resources/Genetics_Lab_Standards.aspx ACMG Technical Standards for Clinical Genetics Laboratories C1.6]<br />
			[https://www.astm.org/e1578-18.html ASTM E1578-18 S-4-2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.5.2.4]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.5.2.4]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />
	[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, SC-13 and SC-28(1)]		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, SC-13 and SC-28(1)]
	\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.		\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.
	\|-		\|-
	\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />		\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]<br />
	[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, AC-3]<br />		[https://clsi.org/standards/products/quality-management-systems/documents/qms22/ CLSI QMS22 2.4.2.2]<br />
	[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, IA-2, IA-2(1–4), and IA-8]<br />		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, AC-3]<br />
	[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, MA-4]		[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, IA-2, IA-2(1–4), and IA-8]<br />
			[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, MA-4]
	\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.		\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.
	\|-		\|-
Line 41:		Line 45:
	\| style="background-color:white;" \|'''35.4''' The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.		\| style="background-color:white;" \|'''35.4''' The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.
	\|-		\|-
	\| style="padding:5px; width:500px;" \|[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, IA-7]		\| style="padding:5px; width:500px;" \|[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, IA-7]
	\| style="background-color:white;" \|'''35.5''' The system should provide a means for authenticating an individual seeking to access any embedded cryptographic module within the system, as well as the individual's role in performing services within the module.		\| style="background-color:white;" \|'''35.5''' The system should provide a means for authenticating an individual seeking to access any embedded cryptographic module within the system, as well as the individual's role in performing services within the module.
	\|-		\|-
	\| style="padding:5px; width:500px;" \|[https://~~nvlpubs~~.nist.gov/~~nistpubs~~/~~SpecialPublications~~/~~NIST.SP.~~800-~~53r4.pdf~~ NIST 800-53, Rev. 4, SC-15]		\| style="padding:5px; width:500px;" \|[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST 800-53, Rev. 5, SC-15]
	\| style="background-color:white;" \|'''35.6''' The system should prevent connected collaborative computing devices (e.g., cameras, microphones, interactive whiteboards) from being activated without explicit permission from the end user, and it should provide a clear indication of any activation to the end user.		\| style="background-color:white;" \|'''35.6''' The system should prevent connected collaborative computing devices (e.g., cameras, microphones, interactive whiteboards) from being activated without explicit permission from the end user, and it should provide a clear indication of any activation to the end user.
	\|-		\|-
	\|}		\|}
	\|}		\|}

Shawndouglas: Added 35.6

2019-11-20T23:40:21Z

Added 35.6

← Older revision		Revision as of 23:40, 20 November 2019
Line 44:		Line 44:
	\| style="background-color:white;" \|'''35.5''' The system should provide a means for authenticating an individual seeking to access any embedded cryptographic module within the system, as well as the individual's role in performing services within the module.		\| style="background-color:white;" \|'''35.5''' The system should provide a means for authenticating an individual seeking to access any embedded cryptographic module within the system, as well as the individual's role in performing services within the module.
	\|-		\|-
			\| style="padding:5px; width:500px;" \|[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, SC-15]
			\| style="background-color:white;" \|'''35.6''' The system should prevent connected collaborative computing devices (e.g., cameras, microphones, interactive whiteboards) from being activated without explicit permission from the end user, and it should provide a clear indication of any activation to the end user.
			\|-
	\|}		\|}
	\|}		\|}

Shawndouglas: Added 35.5

2019-11-20T22:43:28Z

Added 35.5

← Older revision		Revision as of 22:43, 20 November 2019
Line 40:		Line 40:
	\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/45/170.202 45 CFR Part 170.202]<br />[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (h)]		\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/45/170.202 45 CFR Part 170.202]<br />[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (h)]
	\| style="background-color:white;" \|'''35.4''' The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.		\| style="background-color:white;" \|'''35.4''' The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.
			\|-
			\| style="padding:5px; width:500px;" \|[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, IA-7]
			\| style="background-color:white;" \|'''35.5''' The system should provide a means for authenticating an individual seeking to access any embedded cryptographic module within the system, as well as the individual's role in performing services within the module.
	\|-		\|-
	\|}		\|}
	\|}		\|}

Shawndouglas: Added NIST 800-53 to various items

2019-11-15T21:42:19Z

Added NIST 800-53 to various items

← Older revision		Revision as of 21:42, 15 November 2019
Line 16:		Line 16:
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.8.2.1]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.8.2.1]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />
			[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, AC-17(2)]
	\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.		\| style="background-color:white;" \|'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
	\|-		\|-
Line 26:		Line 27:
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.5.2.4]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.5.2.4]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2]<br />
	[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]		[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]<br />
			[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, SC-13 and SC-28(1)]
	\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.		\| style="background-color:white;" \|'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.
	\|-		\|-
	\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]		\| style="padding:5px; width:500px;" \|[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231]<br />
			[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]<br />
			[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, AC-3]<br />
			[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, IA-2, IA-2(1–4), and IA-8]<br />
			[https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf NIST 800-53, Rev. 4, MA-4]
	\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.		\| style="background-color:white;" \|'''35.3''' The system should be able to support multifactor authentication.
	\|-		\|-

Shawndouglas: Created as needed.

2019-09-19T23:27:26Z

Created as needed.

New page

{|
| STYLE="vertical-align:top;"|
{| class="wikitable collapsible" border="1" cellpadding="10" cellspacing="0"
|-
! colspan="2" style="text-align:left; padding-left:20px; padding-top:10px; padding-bottom:10px;"|
|-
! style="color:brown; background-color:#ffffee; width:500px;"| Regulation, Specification, or Guidance
! style="color:brown; background-color:#ffffee; width:700px;"| Requirement
|-
| style="padding:5px; width:500px;" |
[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231] 
[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312] 
[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d-9)] 
[https://www.astm.org/Standards/E1578.htm ASTM E1578-18 S-4-1] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.4] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.8.2.1] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]
| style="background-color:white;" |'''35.1''' The system should use secure communication protocols like SSL/TLS over Secure Hypertext Transfer Protocol with 256 bit encryption.
|-
| style="padding:5px; width:500px;" |
[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231] 
[https://www.law.cornell.edu/cfr/text/45/164.312 45 CFR Part 164.312] 
[https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (d)] 
[https://www.astm.org/Standards/E1578.htm ASTM E1578-18 S-4-2] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.5.2.4] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.10.1.2] 
[https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy Appendix G.6]
| style="background-color:white;" |'''35.2''' The system should support database encryption and be capable of recording the encryption status of the data contained within.
|-
| style="padding:5px; width:500px;" |[https://www.law.cornell.edu/cfr/text/42/493.1231 42 CFR Part 493.1231] [https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center CJIS Security Policy 5.6.2.2.1]
| style="background-color:white;" |'''35.3''' The system should be able to support multifactor authentication.
|-
| style="padding:5px; width:500px;" |[https://www.law.cornell.edu/cfr/text/45/170.202 45 CFR Part 170.202] [https://www.law.cornell.edu/cfr/text/45/170.315 45 CFR Part 170.315 (h)]
| style="background-color:white;" |'''35.4''' The system should support Office of the National Coordinator for Health Information Technology (ONC) transport standards and protocols for the reception and distribution of personal health information.
|-
|}
|}