164.308(a)(7)(i): Contingency Plan
Establish policies and procedures for responding to an emergency or other occurrence that damages systems containing ePHI.
164.308(a)(6)(ii): Response and Reporting
Identify and respond to suspected or known security incidents and mitigate, to the extent practicable, harmful effects.
164.308(a)(6)(i): Security Incident Procedures
Implement policies and procedures to address security incidents.