The third publication on this announcement might be very helpful in your HIPAA security compliance effort.

Regards,

Barbara McGowin

(843) 824-8537

HIPAA AS iLearn

Connecting Health Care Organizations with People,

Products and Services to Achieve HIPAA Compliance.

NIST Released 3 Security Publications / Standards.

1.  2nd Public Draft Special Publication 800-96, PIV Card / Reader Interoperability Guidelines.
URL to view / download this document:
        http://csrc.nist.gov/publications/drafts.html#sp800-96

NIST is pleased to announce the release of Draft Special Publication 800-96 (SP 800-96), PIV Card / Reader Interoperability Guidelines. The SP 800-96 is available for a two week public comment period. The document provides guidelines for interaction between any card and any reader in the PIV system. It covers contact and contactless readers for logical access as well readers for physical access. The comment period closes at 5:00 EST on Friday, August 11th, 2006.


2.  Special Publication 800-85B, PIV Data Model Conformance Test Guidelines.
URL to view / download this document:
        http://csrc.nist.gov/publications/nistpubs/index.html#sp800-85B

NIST is pleased to announce the release of NIST SP 800-85B, PIV Data Model Conformance Test Guidelines. This document provides Derived Test Requirements and Test Assertions for testing all data on the PIV Card. The requirements and assertions cover the following PIV Specifications - SP 800-73-1, SP 800-76 and SP 800-78. In addition it also provides tests for verifying the PKI certificates on the PIV card for conformance to Certificate Profiles in FICC-SSP subcommittee document. The guidelines are to be used by the developers of software modules, PIV card issuers, and entities performing conformance tests.


3.  2nd Public Draft 800-53 Revision 1, Recommended Security Controls for Federal Information Systems.
URL to view / download this document:
        http://csrc.nist.gov/publications/drafts.html#sp800-53-Rev1

NIST is pleased to announce the release of Special Publication 800-53, Revision 1 (Second Public Draft), Recommended Security Controls for Federal Information Systems. SP 800-53, Revision 1 is available for a one-month public comment period. The comment period closes on August 25, 2006.