# HIPAA 164.308(a)(1)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-a-1 · Id: `criterion:hipaa:164.308(a)(1)`

> A covered entity implements policies and procedures to prevent, detect, contain and correct security violations, including risk analysis.

A covered entity implements policies and procedures to prevent, detect, contain and correct security violations, including risk analysis.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(a)(1)` |
| Satisfied by | [Risk assessment](/systems/trust-and-governance/controls/risk-assessment) |