SESK: Stuff Everyone Should Know · sesk.info/hipaa-security-awareness-reminders
Under the HIPAA Security Rule, what are "security reminders"?
Security reminders are periodic security updates, an addressable item.
- A one-time password setup
- Periodic security updates ✔
- A yearly penetration test
Why: Security reminders are part of the security awareness and training standard. The rule describes them simply as periodic security updates, and marks them addressable.
Huh, didn't know that: Security reminders sit in the security awareness and training standard, 45 CFR 164.308(a)(5).
Why did the security reminder show up every month? Because addressable still means you need a good reason to skip it.
Like this card?
References
Answer: Periodic security updates. Security reminders are part of the security awareness and training standard. The rule describes them simply as periodic security updates, and marks them addressable.
- 45 CFR 164.308(a)(5)(ii)(A) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308
Security reminders (Addressable). Periodic security updates.
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
That's stuff everyone should know.