SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-facility-security-plan

What is a facility security plan under the Security Rule?

Addressable policies to safeguard the facility and equipment from unauthorized access.

Start playing free

  1. Encrypt all ePHI
  2. Audit workforce logins
  3. Safeguard facility and equipment from unauthorized physical access ✔

Why: Facility access controls include an addressable facility security plan to protect the facility and equipment from unauthorized physical access, tampering, and theft.

Huh, didn't know that: Physical safeguards matter even with strong technical controls.

The dad joke
Why did the facility security plan hire a locksmith? To keep unauthorized access out.
Like this card?
Play the game

References

Answer: Safeguard facility and equipment from unauthorized physical access. Facility access controls include an addressable facility security plan to protect the facility and equipment from unauthorized physical access, tampering, and theft.

  1. 45 CFR 164.310 Physical safeguards www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.310
    Facility security plan (Addressable). Implement policies and procedures to safeguard the facility and the equipment therein from unauthorized physical access, tampering, and theft.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.