This standard provides guidance to health information organizations on the collection, use, storage, protection, and distribution of data. It helps such organizations assess their access, privacy, and security capabilities. It specifies minimum standards for carrying out organizational self-assessments as well as network alignment assessments to help multiple agencies monitor the consistency of their  capabilities.