{"id":849,"date":"2026-08-17T05:33:13","date_gmt":"2026-08-17T05:33:13","guid":{"rendered":"https:\/\/www.osto.one\/resources\/?p=849"},"modified":"2026-08-17T05:33:13","modified_gmt":"2026-08-17T05:33:13","slug":"administrative-safeguards","status":"publish","type":"post","link":"https:\/\/www.osto.one\/resources\/glossary\/administrative-safeguards\/","title":{"rendered":"Administrative Safeguards: All Nine Standards"},"content":{"rendered":"\n<!-- =========================================================================\n     OSTO GLOSSARY: ADMINISTRATIVE SAFEGUARDS\n     Shared glossary design system. Paste into one Custom HTML block. No H1.\n     ========================================================================= -->\n\n<style>\n.og{\n  --navy:#1c267a; --text:#0f1538; --muted:#0f1538; --light:#0f1538;\n  --border:#e7e9f2; --divider:#eceef5; --white:#ffffff;\n\n  --peri-50:#f4f5fd;  --peri-100:#e9ecfa; --peri-200:#cfd5f2; --peri-700:#4a52a8;\n  --sage-50:#f2f8f5;  --sage-100:#e3f0e9; --sage-200:#c3ddce; --sage-700:#3a6f5d;\n  --apri-50:#fdf6f0;  --apri-100:#fbe9dc; --apri-200:#f2cdb2; --apri-700:#a2603a;\n  --plum-50:#f8f3f9;  --plum-100:#f0e6f3; --plum-200:#dcc6e2; --plum-700:#6b4576;\n  --sky-50:#f1f7fb;   --sky-100:#e2eff7;  --sky-200:#bfd9e9;  --sky-700:#2f6a89;\n\n  --shadow:0 6px 22px rgba(15,21,56,.05);\n  --font:'Inter',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;\n  font-family:var(--font); font-size:17px; line-height:1.75; color:var(--text);\n}\n.og p{margin:0 0 22px}\n.og h2{font-family:var(--font);font-size:clamp(25px,3vw,31px);font-weight:700;line-height:1.25;letter-spacing:-.5px;color:var(--navy);margin:52px 0 8px;scroll-margin-top:92px}\n.og h2::after{content:\"\";display:block;width:46px;height:5px;border-radius:3px;margin:12px 0 18px;background:var(--peri-200)}\n.og h2.c-sage::after{background:var(--sage-200)}\n.og h2.c-apri::after{background:var(--apri-200)}\n.og h2.c-plum::after{background:var(--plum-200)}\n.og h2.c-sky::after{background:var(--sky-200)}\n.og ul,.og ol{padding-left:22px;margin:0 0 24px}\n.og li{margin-bottom:9px}\n.og strong{font-weight:600}\n\n.og .dek{font-size:20px;line-height:1.6;color:var(--muted);margin:0 0 18px}\n.og .tags{margin:0 0 30px;padding:0;list-style:none;display:flex;flex-wrap:wrap;gap:8px}\n.og .tags li{margin:0}\n.og .tag{display:inline-block;font-size:12px;font-weight:600;letter-spacing:.7px;text-transform:uppercase;padding:6px 13px;border-radius:20px}\n.og .t-peri{background:var(--peri-100);color:var(--peri-700)}\n.og .t-sage{background:var(--sage-100);color:var(--sage-700)}\n\n.og .short{background:linear-gradient(135deg,var(--peri-100) 0%,var(--sage-100) 100%);border-radius:22px;padding:28px 32px;margin:0 0 30px}\n.og .short .k{font-size:13px;font-weight:700;letter-spacing:1.4px;text-transform:uppercase;color:var(--peri-700);margin:0 0 10px}\n.og .short p{font-size:19px;line-height:1.65;margin:0;color:var(--text)}\n\n.og .toc{background:var(--peri-50);border-radius:20px;padding:24px 28px;margin:0 0 34px}\n.og .toc .k{font-size:12px;font-weight:700;letter-spacing:1.3px;text-transform:uppercase;color:var(--peri-700);margin:0 0 12px}\n.og .toc ol{margin:0;padding-left:20px;columns:2;column-gap:34px}\n.og .toc li{margin-bottom:8px;break-inside:avoid;font-size:16px}\n.og .toc a{color:var(--navy);text-decoration:none;border-bottom:1px solid rgba(28,38,122,.22)}\n\n.og .callout{border-radius:4px;padding:24px 28px;margin:0 0 30px;background:var(--white);border:2px solid var(--navy)}\n.og .callout .k{font-weight:700;font-size:17px;margin:0 0 8px;color:var(--navy)}\n.og .callout p:last-child{margin-bottom:0}\n.og .callout.c-plum{background:var(--plum-50);border:none;border-radius:20px}\n.og .callout.c-plum .k{color:var(--plum-700)}\n\n.og figure{margin:0 0 30px}\n.og .sx{overflow-x:auto;-webkit-overflow-scrolling:touch;border-radius:20px;background:var(--white);box-shadow:var(--shadow)}\n.og .sx svg{display:block;width:100%;height:auto;min-width:600px}\n.og figcaption{font-size:14px;line-height:1.6;color:var(--muted);margin-top:12px}\n.og .swipe{display:none}\n\n.og table{width:100%;border-collapse:collapse;margin:0 0 28px;font-size:15px;background:var(--white);border-radius:18px;overflow:hidden;box-shadow:var(--shadow)}\n.og th{text-align:left;padding:14px 16px;font-weight:700;font-size:12.5px;letter-spacing:.8px;text-transform:uppercase}\n.og td{border-bottom:1px solid var(--divider);padding:13px 16px;vertical-align:top;line-height:1.6}\n.og tr:last-child td{border-bottom:none}\n.og .h-peri th{background:var(--peri-100);color:var(--peri-700)}\n.og .h-sage th{background:var(--sage-100);color:var(--sage-700)}\n.og .h-plum th{background:var(--plum-100);color:var(--plum-700)}\n\n.og .trio{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin:0 0 28px}\n.og .tcard{border-radius:18px;padding:20px 22px}\n.og .tcard .n{font-size:16px;font-weight:700;margin:0 0 4px}\n.og .tcard .g{font-size:13px;font-weight:600;margin:0 0 10px;opacity:.8}\n.og .tcard p{font-size:14px;line-height:1.55;margin:0;color:var(--muted)}\n.og .tcard.a{background:var(--sky-50)}   .og .tcard.a .n,.og .tcard.a .g{color:var(--sky-700)}\n.og .tcard.b{background:var(--sage-50)}  .og .tcard.b .n,.og .tcard.b .g{color:var(--sage-700)}\n.og .tcard.c{background:var(--plum-50)}  .og .tcard.c .n,.og .tcard.c .g{color:var(--plum-700)}\n\n.og .pill{display:inline-block;font-size:11px;font-weight:700;letter-spacing:.8px;text-transform:uppercase;padding:5px 11px;border-radius:20px;white-space:nowrap}\n.og .p-req{background:var(--plum-200);color:#4d2f57}\n.og .p-exp{background:var(--sky-100);color:var(--sky-700)}\n.og .p-imp{background:#eef0f4;color:var(--muted)}\n.og .p-ask{background:var(--apri-100);color:var(--apri-700)}\n\n.og details{background:var(--white);border-radius:14px;margin:0 0 10px;box-shadow:0 2px 10px rgba(15,21,56,.04)}\n.og summary{cursor:pointer;padding:16px 20px;font-weight:600;font-size:17px;color:var(--navy);list-style:none;display:flex;justify-content:space-between;gap:16px;align-items:flex-start}\n.og summary::-webkit-details-marker{display:none}\n.og summary::after{content:\"+\";font-size:22px;line-height:1;color:var(--peri-700);flex:0 0 auto}\n.og details[open] summary::after{content:\"\\2013\"}\n.og details p{padding:0 20px 18px;margin:0;font-size:16px;line-height:1.7}\n\n.og .related{font-size:15px;color:var(--muted);border-top:1px solid var(--divider);padding-top:22px;margin-top:40px}\n\n@media(max-width:700px){\n  .og{font-size:16px}\n  .og .dek{font-size:18px}\n  .og .short p{font-size:17px}\n  .og .short,.og .toc,.og .callout{padding:22px 20px}\n  .og .toc ol{columns:1}\n  .og .trio{grid-template-columns:1fr}\n  .og .swipe{display:inline;font-weight:600;color:var(--peri-700)}\n  .og table{font-size:14px}\n  .og th,.og td{padding:11px 12px}\n}\n<\/style>\n\n<div class=\"og\">\n\n<p class=\"dek\">Administrative safeguards are the policies, processes and people-side controls the HIPAA Security Rule requires. They are the largest of the three families.<\/p>\n\n<ul class=\"tags\">\n  <li><span class=\"tag t-peri\">Glossary<\/span><\/li>\n  <li><span class=\"tag t-sage\">HIPAA<\/span><\/li>\n<\/ul>\n\n<div class=\"short\">\n  <p class=\"k\">The short answer<\/p>\n  <p>Administrative safeguards are the nine Security Rule standards covering how an organisation manages security: risk analysis, assigned responsibility, workforce access, training, incident response, contingency planning, periodic evaluation and business associate contracts. They account for more of the rule than the physical and technical families combined, and they are where most enforcement findings land.<\/p>\n<\/div>\n\n<p>They are also the ones engineering teams skip, because none of them are shipped as code. A perfectly encrypted system with no risk analysis and no offboarding process still fails.<\/p>\n\n<div class=\"toc\">\n  <p class=\"k\">On this page<\/p>\n  <ol>\n    <li><a href=\"#nine\">The nine standards<\/a><\/li>\n    <li><a href=\"#risk\">Security management process<\/a><\/li>\n    <li><a href=\"#workforce\">Workforce security and access<\/a><\/li>\n    <li><a href=\"#contingency\">Contingency planning<\/a><\/li>\n    <li><a href=\"#osto\">How Osto covers them<\/a><\/li>\n    <li><a href=\"#faq\">FAQ<\/a><\/li>\n  <\/ol>\n<\/div>\n\n<h2 id=\"nine\">The nine standards<\/h2>\n\n<table class=\"h-sage\">\n  <thead>\n    <tr><th>Standard<\/th><th>What it asks for<\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td><strong>Security management process<\/strong><\/td><td>Risk analysis, risk management, sanctions policy, information system activity review<\/td><\/tr>\n    <tr><td><strong>Assigned security responsibility<\/strong><\/td><td>A named security official accountable for the programme<\/td><\/tr>\n    <tr><td><strong>Workforce security<\/strong><\/td><td>Authorisation, supervision, clearance and termination procedures<\/td><\/tr>\n    <tr><td><strong>Information access management<\/strong><\/td><td>Access authorised, established and modified according to role<\/td><\/tr>\n    <tr><td><strong>Security awareness and training<\/strong><\/td><td>Reminders, malware protection, login monitoring, password management<\/td><\/tr>\n    <tr><td><strong>Security incident procedures<\/strong><\/td><td>Identify, respond to, mitigate and document incidents<\/td><\/tr>\n    <tr><td><strong>Contingency plan<\/strong><\/td><td>Backups, disaster recovery, emergency mode operation, testing<\/td><\/tr>\n    <tr><td><strong>Evaluation<\/strong><\/td><td>Periodic reassessment as the environment changes<\/td><\/tr>\n    <tr><td><strong>Business associate contracts<\/strong><\/td><td>Written assurances from every vendor handling ePHI<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<h2 id=\"risk\" class=\"c-sage\">Security management process<\/h2>\n\n<figure>\n<div class=\"sx\">\n<svg viewBox=\"0 0 760 180\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" role=\"img\" aria-label=\"The security management process: risk analysis feeds risk management, sanctions policy and activity review.\">\n  <defs><marker id=\"adA\" markerWidth=\"8\" markerHeight=\"8\" refX=\"6\" refY=\"4\" orient=\"auto\"><path d=\"M0,0 L8,4 L0,8 z\" fill=\"#b9c0d4\"\/><\/marker><\/defs>\n\n  <rect x=\"10\" y=\"42\" width=\"176\" height=\"82\" rx=\"14\" fill=\"#1c267a\"\/>\n  <text x=\"98\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#ffffff\">Risk analysis<\/text>\n  <text x=\"98\" y=\"93\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#b9c1e6\">Where ePHI lives,<\/text>\n  <text x=\"98\" y=\"109\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#b9c1e6\">what threatens it<\/text>\n  <line x1=\"192\" y1=\"83\" x2=\"206\" y2=\"83\" stroke=\"#b9c0d4\" stroke-width=\"2\" marker-end=\"url(#adA)\"\/>\n\n  <rect x=\"212\" y=\"42\" width=\"176\" height=\"82\" rx=\"14\" fill=\"#e9ecfa\"\/>\n  <text x=\"300\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#4a52a8\">Risk management<\/text>\n  <text x=\"300\" y=\"93\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Controls chosen and<\/text>\n  <text x=\"300\" y=\"109\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">implemented<\/text>\n  <line x1=\"394\" y1=\"83\" x2=\"408\" y2=\"83\" stroke=\"#b9c0d4\" stroke-width=\"2\" marker-end=\"url(#adA)\"\/>\n\n  <rect x=\"414\" y=\"42\" width=\"164\" height=\"82\" rx=\"14\" fill=\"#e3f0e9\"\/>\n  <text x=\"496\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#3a6f5d\">Sanctions<\/text>\n  <text x=\"496\" y=\"93\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Consequences for<\/text>\n  <text x=\"496\" y=\"109\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">workforce violations<\/text>\n  <line x1=\"584\" y1=\"83\" x2=\"598\" y2=\"83\" stroke=\"#b9c0d4\" stroke-width=\"2\" marker-end=\"url(#adA)\"\/>\n\n  <rect x=\"604\" y=\"42\" width=\"148\" height=\"82\" rx=\"14\" fill=\"#fbe9dc\"\/>\n  <text x=\"678\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#a2603a\">Activity review<\/text>\n  <text x=\"678\" y=\"93\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Logs and access<\/text>\n  <text x=\"678\" y=\"109\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">reports, reviewed<\/text>\n\n  <text x=\"380\" y=\"158\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" fill=\"#0f1538\">All four are required specifications. None of them are addressable.<\/text>\n<\/svg>\n<\/div>\n<\/figure>\n\n<p>Information system activity review is the one caught most often. Collecting logs satisfies the technical safeguard; this standard requires somebody to actually look at them on a defined cadence and record that they did.<\/p>\n\n<h2 id=\"workforce\" class=\"c-apri\">Workforce security and access<\/h2>\n\n<div class=\"callout\">\n  <p class=\"k\">Termination procedures are the recurring finding<\/p>\n  <p>Access must be removed when someone leaves or changes role. Investigators routinely find active accounts belonging to people who departed months earlier. It is a process failure that a joiner-mover-leaver checklist and periodic access review would prevent.<\/p>\n<\/div>\n\n<p>Information access management pairs with this: access is granted by role, using the <a href=\"https:\/\/www.osto.one\/resources\/glossary\/minimum-necessary-standard\/\">minimum necessary standard<\/a>, and modified when the role changes rather than accumulating.<\/p>\n\n<h2 id=\"contingency\" class=\"c-plum\">Contingency planning<\/h2>\n\n<div class=\"trio\">\n  <div class=\"tcard a\">\n    <p class=\"n\">Data backup plan<\/p>\n    <p>Retrievable exact copies of ePHI. Required, not addressable.<\/p>\n  <\/div>\n  <div class=\"tcard b\">\n    <p class=\"n\">Disaster recovery<\/p>\n    <p>Documented restoration of lost data. Required.<\/p>\n  <\/div>\n  <div class=\"tcard c\">\n    <p class=\"n\">Testing and revision<\/p>\n    <p>Addressable, and the one that turns a plan into something that works.<\/p>\n  <\/div>\n<\/div>\n\n<p>Availability is part of the Security Rule, not a separate concern. A ransomware event that makes records unreachable is a security failure under the rule even if nothing was exfiltrated.<\/p>\n\n<h2 id=\"osto\">How Osto covers them<\/h2>\n\n<p>Administrative safeguards are process plus evidence. Osto supplies both sides: AI policy generation and built-in security awareness training for the documentation, and live control data for the proof. <a href=\"https:\/\/www.osto.one\/resources\/glossary\/mfa\/\">Access management<\/a> records authorisation and removal, <a href=\"https:\/\/www.osto.one\/resources\/glossary\/siem\/\">SIEM<\/a> supports activity review with correlated logs, and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/vapt\/\">testing<\/a> and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">posture monitoring<\/a> feed the periodic evaluation the rule expects.<\/p>\n\n<!-- ============ CTA ============ -->\n<div style=\"background:linear-gradient(135deg,#1c267a 0%,#3f4796 48%,#6b4576 100%);border-radius:22px;padding:38px 34px;margin:40px 0 12px;box-shadow:0 10px 26px rgba(28,38,122,.2);text-align:center;\">\n  <p style=\"display:inline-block;background:rgba(255,255,255,.16);color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:11px;font-weight:700;letter-spacing:1.2px;text-transform:uppercase;padding:6px 14px;border-radius:20px;margin:0 0 16px;\">Free security assessment<\/p>\n  <p style=\"color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:26px;line-height:1.3;font-weight:700;letter-spacing:-.4px;margin:0 0 12px;\">Policies, training and the proof they happened<\/p>\n  <p style=\"color:#cfd3ea;font-family:'Inter',-apple-system,sans-serif;font-size:16px;line-height:1.65;margin:0 auto 26px;max-width:520px;\">AI policy generation and built-in awareness training, backed by live control data for activity review and evaluation.<\/p>\n  <a href=\"https:\/\/osto.one\/contact\/\" style=\"display:inline-block;background:#ffffff;color:#1c267a;font-family:&#039;Inter&#039;,-apple-system,sans-serif;font-weight:700;font-size:16px;text-decoration:none;border-bottom:none;padding:14px 30px;border-radius:12px;margin:0 6px 10px;\" target=\"_blank\" rel=\"noopener\"><span style=\"color:#1c267a;\">Get a free security assessment<\/span><\/a>\n  <a href=\"https:\/\/osto.one\/book-demo\/\" style=\"display:inline-block;background:transparent;color:#ffffff;font-family:&#039;Inter&#039;,-apple-system,sans-serif;font-weight:600;font-size:16px;text-decoration:none;border:1.5px solid rgba(255,255,255,.5);border-radius:12px;padding:13px 28px;margin:0 6px 10px;\" target=\"_blank\" rel=\"noopener\"><span style=\"color:#ffffff;\">Book a platform walkthrough<\/span><\/a>\n  <p style=\"color:#b3b8d8;font-family:'Inter',-apple-system,sans-serif;font-size:13px;margin:14px 0 0;\">Documentation plus evidence &middot; HIPAA mapped &middot; One platform, everything<\/p>\n<\/div>\n\n\n<h2 id=\"faq\">Frequently asked questions<\/h2>\n\n<details>\n  <summary>What are administrative safeguards under HIPAA?<\/summary>\n  <p>The nine Security Rule standards covering how an organisation manages security: risk analysis, assigned responsibility, workforce security, access management, training, incident procedures, contingency planning, evaluation and business associate contracts.<\/p>\n<\/details>\n\n<details>\n  <summary>How many administrative safeguards are there?<\/summary>\n  <p>Nine standards, each with its own implementation specifications marked required or addressable. It is the largest of the three safeguard families in the Security Rule.<\/p>\n<\/details>\n\n<details>\n  <summary>Is a risk analysis an administrative safeguard?<\/summary>\n  <p>Yes, and it is a required specification under the security management process standard. It is also the most frequently cited failure in HIPAA enforcement actions.<\/p>\n<\/details>\n\n<details>\n  <summary>Is security awareness training required?<\/summary>\n  <p>The training standard itself is required, though its individual specifications are addressable. Regulators expect documented, periodic training for all workforce members with access to ePHI, not a one-time induction.<\/p>\n<\/details>\n\n<details>\n  <summary>What is the difference between administrative and technical safeguards?<\/summary>\n  <p>Administrative safeguards govern people and process: policies, training, responsibility and planning. <a href=\"https:\/\/www.osto.one\/resources\/glossary\/technical-safeguards\/\">Technical safeguards<\/a> govern the systems: authentication, encryption, audit controls and transmission security.<\/p>\n<\/details>\n\n<p class=\"related\"><strong>Related glossary terms:<\/strong> HIPAA Security Rule &middot; Physical Safeguards &middot; Technical Safeguards &middot; Risk Assessment &middot; ePHI &middot; Minimum Necessary Standard<\/p>\n\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Administrative safeguards are the policies, processes and people-side controls the HIPAA Security Rule requires. They are the largest of the\u2026<\/p>\n","protected":false},"author":8,"featured_media":850,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[180],"tags":[340,339],"class_list":["post-849","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-glossary","tag-administrative-safeguards","tag-hipaa-administrative-safeguards"],"_links":{"self":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/comments?post=849"}],"version-history":[{"count":1,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/849\/revisions"}],"predecessor-version":[{"id":851,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/849\/revisions\/851"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media\/850"}],"wp:attachment":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media?parent=849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/categories?post=849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/tags?post=849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}