Identity & Access · Privacy & Sector Regulation
Okta for HIPAA Security Rule
What Okta’s data evidences toward HIPAA Security Rule today, and how to connect it.
What Okta evidences here
- MFA & identity coverage feeds Technical Safeguards
This is where Okta’s data is documented as relevant on our HIPAA Security Rule page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Okta
MFA enrolment and factor coverage, suspicious sign-in events, and the SaaS app catalog — the broadest identity signal cmdash ingests.
About HIPAA Security Rule
Administrative, physical and technical safeguards under 45 CFR 164, with verbatim public-domain text.
§ 164.308, § 164.310 and § 164.312 only. § 164.314 (organizational requirements) and § 164.316 (policies, procedures and documentation) are not seeded.
Okta also evidences
ISO/IEC 42001:2023NIST AI Risk Management Framework 1.0NIST Cybersecurity Framework 2.0NIST Cybersecurity Framework (1.1, legacy)ISO/IEC 27001:2022CIS Controls v8.1CMMC Level 1CMMC Level 2CMMC Level 3FedRAMP ModerateSOC 2 Type IIHITRUST CSF v11TISAX (VDA ISA v6)SOX ITGCGDPRPCI DSS v4.0.1DORANYDFS Cybersecurity RegulationNIST SP 800-171 Revision 3