--- title: "Data Security Guidance: What are the Security Rule Key Terms and Definitions?" description: Compliancy Group Help Center --- [Skip to content](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246473-what-are-the-security-rule-key-terms-and-definitions-#main-content) English - United States Show submenu for translations [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new?hsLang=en-us) [Go To Customer Portal](https://help.compliancygroup.com/home?hsLang=en-us) ![Compliancy Group](https://knowledge.compliancygroup.com/hs-fs/hubfs/Compliancy%20Group%20Logo%20Full%20RBG-sized.png?width=300&height=54&name=Compliancy%20Group%20Logo%20Full%20RBG-sized.png) Open main navigation Close main navigation - English - United States Show submenu for translations - [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new) - [Go To Customer Portal](https://help.compliancygroup.com/home) How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://knowledge.compliancygroup.com/home?hsLang=en-us) 2. [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us) 3. [Data Security](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#data-security) # Data Security Guidance: What are the Security Rule Key Terms and Definitions? **DISCLAIMER: The information provided in this article, other knowledge base articles, and the Compliancy Group website do not, and are not intended to, constitute legal advice. All information, content, and materials in the Knowledge Base and on the Compliancy Group website are for general informational purposes only.** **Introduction** The Security Rule [defines](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.304) a number of security concepts that appear throughout the text of the rule. These concepts and their definitions are listed below. The definitions can be found at 45 CFR 164.304. For selected definitions, the rules in which the definitions is mentioned, are cited below. Access means the ability or the means necessary to read, write, modify, or communicate data/information or otherwise use any system resource. (This definition applies to “access” as used in the [Security Rule](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C?toc=1), not as used in the [Breach Notification Rule](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D?toc=1) or as used in the [Privacy Rule](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E).)   **Administrative safeguards** are administrative actions, and policies and procedures, to manage the selection, development, implementation, and maintenance of security measures to protect electronic protected health information and to manage the conduct of the covered entity's or business associate's workforce in relation to the protection of that information.  (45 CFR 164.308). **Authentication** means the corroboration that a person is the one claimed.  (45 CFR 164.312(d)). **Availability** means the property that data or information is accessible and useable upon demand by an authorized person. (45 CFR 164.306). **Confidentiality** means the property that data or information is not made available or disclosed to unauthorized persons or processes.  (45 CFR 164.306). **Encryption** means the use of an algorithmic process to transform data into a form in which there is a low probability of assigning meaning without use of a confidential process or key.  (45 CFR 164.312). **Facility** means the physical premises and the interior and exterior of a building(s).  (45 CFR 164.310).  **Information system** means an interconnected set of information resources under the same direct management control that shares common functionality. A system normally includes hardware, software, information, data, applications, communications, and people. (45 CFR 164.308(a)(1)). **Integrity** means the property that data or information have not been altered or destroyed in an unauthorized manner. (45 CFR 164.312(c)). **Malicious software** means software, for example, a virus, designed to damage or disrupt a system. (45 CFR 164.308(a)(5)). **Password** means confidential authentication information composed of a string of characters. (45 CFR 164.308(a)(5)). **Physical safeguards** are physical measures, policies, and procedures to protect a covered entity's or business associate's electronic information systems and related buildings and equipment, from natural and environmental hazards, and unauthorized intrusion. (45 CFR 164.310). **Security** or **Security measures** encompass all of the administrative, physical, and technical safeguards in an information system.  **Security incident** means the attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with system operations in an information system. (45 CFR 164.308(a)(6)). **Technical safeguards** means the technology and the policy and procedures for its use that protect electronic protected health information and control access to it. (45 CFR 164.312). **User** means a person or entity with authorized access.  **Workstation** means an electronic computing device, for example, a laptop or desktop computer, or any other device that performs similar functions, and electronic media stored in its immediate environment. (45 CFR 164.310). - [Getting started](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#main-content) - [Onboarding](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#onboarding) - [Product Overviews](https://knowledge.compliancygroup.com/home/getting-started?hsLang=en-us#product-overviews) - [Workforce](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#main-content) - [Policies](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#policies) - [Settings Module](https://knowledge.compliancygroup.com/home/workforce?hsLang=en-us#settings-module) - [3rd Party Risk](https://knowledge.compliancygroup.com/home/3rd-party-risk?hsLang=en-us) - [Incident Management](https://knowledge.compliancygroup.com/home/incident-management?hsLang=en-us) - [Risks & Assessments](https://knowledge.compliancygroup.com/home/risks-assessments?hsLang=en-us) - [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#main-content) - [Privacy](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#privacy) - [Data Security](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#data-security) - [OSHA Workplace Safety](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#osha-workplace-safety) - [Clinical & Quality](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#clinical-quality) - [State Requirements](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#state-requirements) - [Fraud, Waste & Abuse](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#fraud-waste-abuse) - [Compliance Operations](https://knowledge.compliancygroup.com/home/healthcare-compliance?hsLang=en-us#compliance-operations) - [Legacy Guard Features](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#main-content) - [Admin - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#admin-legacy) - [Assets - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#assets-legacy) - [Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#documents-legacy) - [Incidents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#incidents-legacy) - [My Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#my-documents-legacy) - [My Tasks - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#my-tasks-legacy) - [People - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#people-legacy) - [Programs - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#programs-legacy) - [Reports - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#reports-legacy) - [The Dashboard - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#the-dashboard-legacy) - [Training - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#training-legacy) - [Vendors - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features?hsLang=en-us#vendors-legacy) - [Account & Billing](https://knowledge.compliancygroup.com/home/account-billing?hsLang=en-us) - [The Guard Support](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#main-content) - [P&P Drafts](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#pp-drafts) - [Settings](https://knowledge.compliancygroup.com/home/the-guard-support?hsLang=en-us#settings) [![compliancy-group-logo-white](https://knowledge.compliancygroup.com/hs-fs/hubfs/compliancy-group-logo-white.png?width=200&height=37&name=compliancy-group-logo-white.png "compliancy-group-logo-white")](http://compliancy-group.com) Contact Us - [support@compliancygroup.com](mailto:support@compliancygroup.com) Copyright © 2026, Compliancy Group LLC Cookie Settings