# HIPAA 164.308(a)(6)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-a-6 · Id: `criterion:hipaa:164.308(a)(6)`

> The entity identifies, responds to, mitigates and documents security incidents.

The entity identifies, responds to, mitigates and documents security incidents.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(a)(6)` |
| Satisfied by | [Incident handling](/systems/trust-and-governance/controls/incident-handling) |