§164.312(a)(2)(i): Assign a unique name and/or number for identifying and tracking user identity.
Audit Inquiry
Does the entity have polices and procedures regarding the assignment of unique user IDs to track user identity?
Does the entity assign unique user IDs to track user identity?
Obtain and review policies and procedures regarding the assignment of unique user IDs. Evaluate the content of the policies and procedures in relation to the specified performance criteria to determine how user IDs are to be established and assigned.
Obtain and review documentation demonstrating the assignment, creation, and use of unique user IDs in electronic information systems for user. Evaluate and determine if users are assigned a unique ID in accordance with the entity’s policies and procedures for attributing new user IDs.
Required/Addressable
Required