SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-login-monitoring-addressable

What does the Security Rule's log-in monitoring item call for?

Procedures for monitoring login attempts and reporting discrepancies are addressable.

Start playing free

  1. Disable all remote access
  2. Monitor log-in attempts and report discrepancies ✔
  3. Change every password weekly

Why: Login monitoring is addressable. It helps detect unauthorized access to systems that contain ePHI.

Huh, didn't know that: Automated alerts and review of unusual logins are common ways to meet this.

The dad joke
Why did the system watch every login? It wanted to catch password imposters.
Like this card?
Play the game

References

Answer: Monitor log-in attempts and report discrepancies. Login monitoring is addressable. It helps detect unauthorized access to systems that contain ePHI.

  1. 45 CFR 164.308(a)(5)(ii)(C) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308
    Log-in monitoring (Addressable). Procedures for monitoring log-in attempts and reporting discrepancies.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.