Protect electronic health information Stage 1 Objective: §495.6(d)(15)(i) - Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities. Stage 1 Measure: §495.6(d)(15)(ii) - Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process. |