Class HipaaOrganizationalRules

java.lang.Object

com.cloudforgeci.api.core.rules.HipaaOrganizationalRules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="HIPAA-Organizational",
                     priority=15,
                     displayName="HIPAA Organizational Requirements",
                     description="Validates HIPAA organizational and administrative safeguards")
public class HipaaOrganizationalRules
extends Object
implements FrameworkRules<SystemContext>

HIPAA organizational and administrative safeguard validation rules.

These rules enforce HIPAA requirements that extend beyond infrastructure:

• Business Associate Agreements (BAA) - §164.308(b), §164.314
• Workforce Security - §164.308(a)(3)
• Administrative Safeguards - §164.308(a)
• Breach Notification - §164.308(a)(6), §164.410

Controls Implemented

• Business Associate Agreement validation
• Workforce security procedures
• Emergency access procedures
• Automatic logoff validation
• Breach notification readiness

Usage

// Install HIPAA organizational validation
HipaaOrganizationalRules.install(ctx);

Important Note

These controls require organizational policies and procedures that cannot be fully automated. Infrastructure validation ensures technical readiness, but organizations must maintain separate documentation and processes.

Constructor Summary

Constructors

Constructor	Description
HipaaOrganizationalRules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install HIPAA organizational validation rules.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

HipaaOrganizationalRules

public HipaaOrganizationalRules()

Method Details

install

public void install(SystemContext ctx)

Install HIPAA organizational validation rules. Only applies when HIPAA framework is selected.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - System context

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). "HIPAA-Organizational" is not a ComplianceMatrix column, so this declaration is for documentation only, not enforced by the sync test. Every check in this class reads a manually-attested deployment-context flag (BAA signed, workforce authorization, emergency access, breach notification, etc.) rather than any infrastructure state a ComplianceMatrix.SecurityControl describes, so no control names are claimed.

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared