Please follow
http://www.nist.gov/itl/csd/safeguarding-health-information-hipaa-security-2016.cfm
.