The purpose of this publication is to help educate readers about the security standards included in the HIPAA Security Rule. It provides a brief overview of the HIPAA Security Rule, directs the reader to additional NIST publications on information security, and identifies typical activities an agency should consider in implementing an information security program.