From FISMApedia
Jump to: navigation, search

NIST SP 800-66

A rule, condition, or requirement: (1) Describing the following information for products, systems, services or practices: (i) Classification of components. (ii) Specification of materials, performance, or operations; or (iii) Delineation of procedures; or (2) With respect to the privacy of individually identifiable health information. (45 C.F.R., Sec. 160.103)