Talking of an IT organization, infrastructure is a collective term for software, hardware, and other systems that are required for offering IT services. IT infrastructure security management includes the management of IT policies and processes, along with the data, human resources, equipment, and external contact like security organizations or vendors, needed to ensure that the IT operations runs smoothly.
Any person or organization dealing in the healthcare or related industry, or has access to protected health information needs to comply with HIPAA.
The physical safeguards have to do everything with who has access to PHI data and how that access is managed. Most of the physical safeguard requirements that developers have to worry about is managed by HIPPA Compliant Hosting companies. The remaining ones are handled by the internal rules laid down by you around who can and cannot access PHI.
