Administrative Safeguards

Overview:Apply appropriate sanctions against workforce members who fail to comply with the security policies and procedures of the covered entity or business associate. Action Items:1) Obtain and review documentation of the sanction policies and... Read More

Overview:Implement a security awareness and training program for all members of its workforce (including management). Action Items:1) Obtain and review policies and procedures for security awareness and training program. Elements to review may... Read More

Overview:Implement policies and procedures to address security incidents. Action Items:1) Obtain and review the policies and procedures related to security incidents. Elements to review may include but are not limited to: Identification of what... Read More

Overview:A covered entity or business associate must in accordance with 164.306: (1)(i) Implement policies and procedures to prevent, detect, contain, and correct security violations. Action Items:1) Obtain and review policies and procedures related... Read More

Overview:Periodic security updates. Action Items:1) Obtain and review documentation demonstrating how periodic security updates are conducted. Elements to review may include but are not limited to: Frequency of the periodic security updates; Methods... Read More

Overview:Implement procedures for terminating access to electronic protected health information when the employment of, or other arrangement with, a workforce member ends or as required by determinations made as specified in paragraph (a)(3)(ii)(b).... Read More

Overview:Implement procedures for periodic testing and revision of contingency plans. Action Items:1) Obtain and review policies and procedures related to periodic testing and revision of contingency plans. Elements to review may include but are not... Read More

Overview:Implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate. Action Items:1) Obtain and review documentation related to workforce clearance procedures. Evaluate and... Read More

Overview:Implement policies and procedures to ensure that all members of its workforce have appropriate access to electronic protected health information, as provided under paragraph (a)(4) of this section, and to prevent those workforce members who... Read More

Overview:Document the satisfactory assurances required by paragraph (b)(1) of this section through a written contract or other arrangement with the business associate that meets the applicable requirements of § 164.314(a). Action Items:1) Obtain and... Read More