Incident Response & Operations
Security Incident
An attempted or successful unauthorized access, use, or interference with ePHI systems.
Under the HIPAA Security Rule, a security incident is the attempted or successful unauthorized access, use, disclosure, modification, or destruction of information, or interference with system operations, in a system holding ePHI.
Not every security incident is a reportable breach, but organizations must be able to identify, respond to, and document incidents. This is the job of the incident response plan.