The technology and the policy and procedures for its use that protect electronic protected health information and control access to it.
Source(s):
NIST SP 800-66 Rev. 1
from
45 C.F.R., Sec. 164.304