Tingg

Epic Title (use exactly):
HIPAA – Access Control & Identity Management

BRD Reference:
Section 7.1 (Access Management)
Section 8.1 (Authentication & Authorization)

Objective:
Ensure only authorized users can access PHI using strong identity, role, and authentication controls.

Covers:
RBAC (Admin / Analyst / Viewer)
Unique user accounts
MFA for privileged users
Least privilege enforcement
Internal service-to-service authentication