{"id":21608,"date":"2020-02-13T17:26:00","date_gmt":"2020-02-13T17:26:00","guid":{"rendered":"https:\/\/www.process.st\/templates\/hipaa-compliance-checklist-for-hr\/"},"modified":"2024-02-29T01:22:07","modified_gmt":"2024-02-29T01:22:07","slug":"hipaa-compliance-checklist-for-hr","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/hipaa-compliance-checklist-for-hr\/","title":{"rendered":"HIPAA Compliance Checklist for HR"},"content":{"rendered":"<section id=\"introduction-to-the-hipaa-checklist-for-hr\">\n<h2>Introduction to the HIPAA Checklist for HR:<\/h2>\n<div class=\"image-content\">\n<figure>\n   <a href=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/ieqL3rmMGsVnbgVdr61ADw.png\" alt=\"Introduction to the HIPAA Checklist for HR:\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/ieqL3rmMGsVnbgVdr61ADw.png\"> <\/a><br \/>\n  <\/figure>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>In 1996, the United States Government passed a&nbsp;<a href=\"https:\/\/evisit.com\/resources\/hipaa-guide\/\" rel=\"nofollow noopener\" target=\"_blank\">legislation<\/a>&nbsp;for the privacy and safeguarding of all medical data.&nbsp;<\/p>\n<p>This legislation is known as the Health Insurance Portability and Accountability Act, but is more commonly referred to as HIPPA (which is thankfully, easier to remember).<\/p>\n<p>Anyone in the <a href=\"https:\/\/www.hipaajournal.com\/who-does-hipaa-apply-to\/\" rel=\"nofollow noopener\" target=\"_blank\">healthcare industry<\/a> who&nbsp;deals with Protected Health Information (PHI), must comply with HIPAA Rules.<\/p>\n<p><em>What happens if you don\u2019t comply with HIPAA rules?&nbsp;<\/em><\/p>\n<p>You have to pay out a <em>lot<\/em> of money. And I mean a <em>lot<\/em>. The following healthcare providers didn't fully comply with HIPPA and are great examples of the kind of money we're talking about:&nbsp;<\/p>\n<p>The University of California Los Angeles Health System was <a href=\"https:\/\/www.hipaajournal.com\/ucla-hospitals-receives-865k-hipaa-fine-failing-protect-celebrity-medical-records\/\" rel=\"nofollow noopener\" target=\"_blank\">fined $865,000<\/a> for failing to restrict access to medical records.<\/p>\n<p>North Memorial Health Care of Minnesota had to pay<a href=\"https:\/\/www.hipaajournal.com\/1-55-m-hipaa-settlement-baa-risk-analysis-failures-3358\/\" rel=\"nofollow noopener\" target=\"_blank\"> $1.55 million in a settlement<\/a>, for failing to enter into a Business Associate Agreement with a major contractor.<\/p>\n<p>The Memorial Healthcare System received a <a href=\"https:\/\/www.hipaajournal.com\/ocr-record-hipaa-settlement-memorial-healthcare-system-8695\/\" rel=\"nofollow noopener\" target=\"_blank\">$5,500,000 penalty <\/a>for insufficient ePHI access controls.<\/p>\n<p>The Memorial Hermann Health System had to pay <a href=\"https:\/\/www.hipaajournal.com\/memorial-hermann-health-system-hit-2-4-million-hipaa-fine-8802\/\" rel=\"nofollow noopener\" target=\"_blank\">$2.4 million<\/a> in a settlement for disclosing a patient\u2019s PHI in a press release.<\/p>\n<p>It clearly pays to be compliant.<\/p>\n<p><em>What do you have to do to be HIPAA compliant?&nbsp;<\/em><\/p>\n<p>HIPAA compliance is a series of <a href=\"https:\/\/compliancy-group.com\/what-is-hipaa-compliance\/\" rel=\"nofollow noopener\" target=\"_blank\">regulatory standards<\/a> which&nbsp;outline the lawful use and disclosure of&nbsp;PHI.&nbsp;<\/p>\n<p>Healthcare entities must perform ongoing technical and non-technical <a href=\"http:\/\/www.coveringkidsandfamilies.org\/resources\/docs\/HIPAAQA.pdf\" rel=\"nofollow noopener\" target=\"_blank\">evaluations <\/a>to establish if their security policies and procedures meet these regulatory standards.<\/p>\n<p>Don\u2019t be fooled though.<\/p>\n<p>It may sound simple, but HIPAA compliance is never <a href=\"https:\/\/www.securitymetrics.com\/blog\/what-hipaa-compliance-and-how-long-will-it-take\" rel=\"nofollow noopener\" target=\"_blank\">100% complete<\/a>.<\/p>\n<p>Changes to medical processes, technology, policies, procedures, staffing, HIPAA rules, and business practices all mean a change to the environment and will easily render a HIPAA certification <a href=\"https:\/\/www.hipaajournal.com\/what-is-hipaa-certification\/\" rel=\"nofollow noopener\" target=\"_blank\">invalid<\/a>.<\/p>\n<p>To prove this point,&nbsp;researchers found, in the first 6 months of 2019, a total of <a href=\"https:\/\/healthitsecurity.com\/news\/32m-patient-records-breached-in-first-half-of-2019-88-caused-by-hacking\" rel=\"nofollow noopener\" target=\"_blank\">285 incidents<\/a> were reported.<\/p>\n<p>Luckily, <a href=\"https:\/\/www.process.st\" rel=\"nofollow noopener\" target=\"_blank\">Process Street<\/a> is here to help.&nbsp;<\/p>\n<p>HIPAA requires <a href=\"https:\/\/evisit.com\/resources\/hipaa-guide\/\" rel=\"nofollow noopener\" target=\"_blank\">transparency<\/a> first and foremost, which means&nbsp;<strong>activity revolving around regulated data systems may be audited at any time.&nbsp;<\/strong><\/p>\n<p>The HIPAA compliance checklist that Process Street has created will make sure you are ready for an audit.&nbsp;<\/p>\n<p>We\u2019ve created a series of tasks and questions, based on the advice given by the <a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/compliance-enforcement\/index.html\" rel=\"nofollow noopener\" target=\"_blank\">HHS\u2019 Office for Civil Rights<\/a> and the <a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal,&nbsp;<\/a>about the <a href=\"https:\/\/compliancy-group.com\/what-is-hipaa-compliance\/\" rel=\"nofollow noopener\" target=\"_blank\">measures<\/a> your organization should have in place to keep you HIPAA compliant.&nbsp;<\/p>\n<p class=\"style-danger\" style=\"text-align: center;\"><strong>A word of warning<\/strong>!<\/p>\n<p>This checklist allows you to <a href=\"http:\/\/hipaa-journal-hipaa-compliance-checklist.pdf\" rel=\"nofollow noopener\" target=\"_blank\">self-evaluate <\/a>HIPAA compliance in your organization. <\/p>\n<p>However, successfully completing this checklist does not <em>guarantee<\/em>&nbsp;you are HIPAA compliant. <\/p>\n<p>To be safe, you should always consult a HIPAA compliance expert.&nbsp;&nbsp;<\/p>\n<p><a href=\"https:\/\/www.process.st\" rel=\"nofollow noopener\" target=\"_self\">Process Street<\/a> is <strong>super-powered checklists<\/strong>. It\u2019s the easiest way to manage your recurring tasks, procedures and workflows. <a href=\"https:\/\/www.process.st\/help\/docs\/getting-started-using-template-overview\/\" rel=\"nofollow noopener\" target=\"_self\">Create a template<\/a> and&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/getting-started-run-a-checklist\/\" rel=\"nofollow noopener\" target=\"_self\">run individual checklists&nbsp;<\/a>for each member of your team. You can check tasks off as you work through them, set deadlines,&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/approvals\/\" rel=\"nofollow noopener\" target=\"_self\">add approvals<\/a>, <a href=\"https:\/\/www.process.st\/help\/docs\/task-assignments\/\" rel=\"nofollow noopener\" target=\"_self\">assign tasks<\/a>, and <a href=\"https:\/\/www.process.st\/help\/docs\/template-overview\/\" rel=\"nofollow noopener\" target=\"_self\">track each team member's progress<\/a>. You can also <a href=\"https:\/\/www.process.st\/help\/docs\/zapier-examples\/\" rel=\"nofollow noopener\" target=\"_self\">connect to thousands of Apps<\/a> through <a href=\"https:\/\/zapier.com\/app\/zaps\" rel=\"nofollow noopener\" target=\"_blank\">Zapier<\/a> and automate your workflows even more.<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-checklist-information\">\n<h2>Complete checklist information<\/h2>\n<div class=\"text-content\">\n<p><strong>Fill out<\/strong> the checklist<strong> information<\/strong> in the fields <strong>below.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Company name <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Company ID number <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of assessment <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>The date of the next audit should be 1 year after the date of the assessment.<\/strong><\/p>\n<p>You can either select the next audit date in the field below, or you can use the dynamic due dates feature to automatically set the date.<\/p>\n<p>Find out more about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of next audit: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"assign-tasks\">\n<h2>Assign tasks<\/h2>\n<div class=\"text-content\">\n<p><strong>Assign<\/strong>&nbsp;the below&nbsp;<strong>tasks<\/strong>&nbsp;to the relevant internal HIPAA <strong>representatives<\/strong> so they can <strong>ensure<\/strong> that their department \/ assigned area of focus is <strong>compliant.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-danger\"><strong>Assign task 12 to the designated HIPAA Compliance, Privacy, and\/or Security Officer<\/strong><\/p>\n<p class=\"style-danger\"><strong>Assign tasks 18 - 26 to the IT lead<\/strong><\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"annual-auditsassessments\">\n<h2>Annual Audits\/Assessments:<\/h2>\n<\/section>\n<section id=\"complete-the-security-risk-audit\">\n<h2>Complete the security risk audit<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and<strong> upload<\/strong> the <strong>security audit<\/strong> for <strong>this year's<\/strong> assessment.<\/p>\n<p><strong>Identify<\/strong>&nbsp;the <strong>gaps<\/strong> found during the audit and <strong>create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s audit documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years audit <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years audit <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Upload the security audits and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/h5>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-the-privacy-assessment-not-required-for-bas\">\n<h2>Complete the privacy assessment (not required for BA's)<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and <strong>upload<\/strong> the privacy assessment for <strong>this year<\/strong>.<\/p>\n<p><strong>Identify<\/strong> any <strong>gaps<\/strong> found during the assessment and <strong>create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s assessment documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years assessment <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years assessment <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Upload the privacy assessments and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/h5>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the assessment from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-the-hitech-subtitle-d-audit\">\n<h2>Complete the HITECH subtitle D audit<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and<strong> upload<\/strong>&nbsp;the HITECH subtitle D audit for <strong>this year<\/strong>.<\/p>\n<p><strong>Identify<\/strong> any <strong>gaps<\/strong> found during the audit and <strong>create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s audit documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years audit <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years audit <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Upload the HITECH subtitle D audits and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/h5>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-the-security-standards-audit\">\n<h2>Complete the security standards audit<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and <strong>upload<\/strong>&nbsp;the security standards audit for <strong>this year<\/strong>.<\/p>\n<p><strong>Identify<\/strong> any <strong>gaps<\/strong> found during the audit and <strong>create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s audit documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years audit <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years audit <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Upload the security standards audits and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/h5>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-the-asset-and-device-audit\">\n<h2>Complete the asset and device audit<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and <strong>upload<\/strong> the asset and device audit for <strong>this year<\/strong>.<\/p>\n<p><strong>Identify<\/strong> any <strong>gaps<\/strong> found during the audit and<strong> create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s audit documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years audit <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years audit <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>Upload the asset and device audits and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"complete-the-physical-site-audit\">\n<h2>Complete the physical site audit<\/h2>\n<div class=\"text-content\">\n<p><strong>Complete<\/strong> and <strong>upload<\/strong> the physical site audit for<strong> this year<\/strong>.<\/p>\n<p><strong>Identify<\/strong> any<strong> gaps<\/strong> found during the audit and <strong>create<\/strong> and <strong>upload<\/strong> a <strong>remediation plan<\/strong> to address these gaps.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Current Year<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload this year\u2019s audit documentation here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Identify any gaps found by this years audit <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload remediation plans to address the gaps found in this years audit <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>Upload the physical site audits and remediation plans from the last <strong>six<\/strong> years.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 1<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 1 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 2<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 2 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 3<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 3 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 4<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 4 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 5<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 5 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Year 6<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the audit from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the remediation plan from year 6 <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"hipaa-training\">\n<h2>HIPAA Training:<\/h2>\n<\/section>\n<section id=\"ensure-all-staff-complete-the-annual-hipaa-training\">\n<h2>Ensure all staff complete the annual HIPAA training<\/h2>\n<div class=\"text-content\">\n<p><strong>Send<\/strong> an email to <strong>all staff<\/strong> about the annual <strong>HIPAA training<\/strong> and <strong>deadline. <\/strong><\/p>\n<p><strong>Upload<\/strong> a <strong>registration document<\/strong>, once all <strong>staff<\/strong> members have <strong>completed<\/strong> the <strong>training.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of annual HIPAA training <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload staff registration document for annual HIPAA training <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"ensure-all-staff-complete-the-security-awareness-training\">\n<h2>Ensure all staff complete the security awareness training<\/h2>\n<div class=\"text-content\">\n<p><strong>Send<\/strong> an email to <strong>all staff<\/strong> about the <strong>security awareness training<\/strong> and <strong>deadline.&nbsp;<\/strong><\/p>\n<p><strong>Upload<\/strong> a <strong>registration<\/strong> document, once all <strong>staff<\/strong> members have <strong>completed<\/strong> the <strong>training.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date to complete security awareness training <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload staff registration document for Security Awareness Training <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"set-quarterly-reminders-to-reinforce-security-awareness-training\">\n<h2>Set quarterly reminders to reinforce security awareness training<\/h2>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>The date of the next security awareness training should be 3 months after the completion of the current security awareness training.<\/strong><\/p>\n<p>You can either <strong>select<\/strong> the next security awareness training <strong>date<\/strong> in the field below, or you can use the <strong>dynamic due dates<\/strong> feature to <strong>automatically<\/strong> set the date.<\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of next security awareness training <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"emergency-planning\">\n<h2>Emergency Planning:<\/h2>\n<\/section>\n<section id=\"develop-plans-for-emergencies\">\n<h2>Develop plans for emergencies<\/h2>\n<div class=\"text-content\">\n<p><strong>Develop<\/strong>&nbsp;and <strong>upload<\/strong> contingency <strong>plans<\/strong> for the below<strong>&nbsp;situations.&nbsp;<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Responding to Emergencies&nbsp;<\/h5>\n<p><strong>Upload<\/strong> your <strong>policy<\/strong> for responding to <strong>general&nbsp;emergency situations <\/strong>and<strong> select <\/strong>the<strong> date <\/strong>of the policy<strong> upload.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload a policy for responding to emergency situations <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of policy upload <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>You will need to review, test &amp; re-upload this policy, 6 months after the policy was uploaded.<\/strong><\/p>\n<p>You can either <strong>select<\/strong> the <strong>date<\/strong> to review, test &amp; re-upload in the field <strong>below<\/strong>, or you can use the <strong>dynamic due dates<\/strong> feature to <strong>automatically<\/strong> set the <strong>date.<\/strong><\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date to review, test &amp; re-upload policy <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Continuing Critical Business Processes&nbsp;<\/h5>\n<p><strong>Upload<\/strong> your <strong>policy<\/strong> for <strong>continuing with critical business processes<\/strong> during emergency situations and<strong> select <\/strong>the<strong> date <\/strong>of the policy<strong> upload.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload a procedure for ensuring business processes continue <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of policy upload <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>You will need to review, test &amp; re-upload this policy, 6 months after the policy was uploaded.<\/strong><\/p>\n<p>You can either <strong>select<\/strong> the <strong>date<\/strong> to review, test &amp; re-upload in the field <strong>below<\/strong>, or you can use the <strong>dynamic due dates<\/strong> feature to automatically set the <strong>date.<\/strong><\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date to review, test &amp; re-upload policy <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Security Incidents &amp; Breaches<\/h5>\n<p><strong>Upload<\/strong> your <strong>policy<\/strong> for dealing with <strong>security incidents and data breaches<\/strong>&nbsp;and<strong> select <\/strong>the<strong> date <\/strong>of the policy<strong> upload.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>Within the security incidents &amp; data breaches policy, make sure you include the following information:<\/strong> <\/p>\n<p>1. a <strong>process<\/strong> for <strong>tracking<\/strong> and <strong>managing<\/strong> <strong>investigations<\/strong> for all <strong>incidents<\/strong><\/p>\n<p>2. a <strong>process<\/strong> for <strong>staff<\/strong> members to <strong>anonymously report<\/strong> a privacy\/security <strong>incident<\/strong> or potential HIPAA <strong>violation.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the process for security incidents and data breaches <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"access-to-ephi\">\n<h2>Access to ePHI:<\/h2>\n<\/section>\n<section id=\"assess-whether-encryption-of-ephi-is-needed\">\n<h2>Assess whether encryption of ePHI is needed<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> a <strong>risk analysis<\/strong> that <strong>determines<\/strong> if the <strong>encryption<\/strong> of <strong>ePHI<\/strong> is <strong>needed<\/strong> and confirm the <strong>answer<\/strong> in the fields <strong>below.&nbsp;<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload risk analysis <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Is encryption needed? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"implement-alternative-measures\">\n<h2>Implement alternative measures<\/h2>\n<div class=\"text-content\">\n<p>As encryption is <strong>not needed<\/strong>, you will need to <strong>implement<\/strong> alternative <strong>measures<\/strong> to ensure the <strong>confidentiality, integrity,<\/strong> and <strong>availability<\/strong> of <strong>ePHI.<\/strong><\/p>\n<p><strong>Create<\/strong> and <strong>upload<\/strong> a <strong>policy<\/strong> which covers these <strong>alternative measures.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"guard-against-unauthorized-access-of-ephi\">\n<h2>Guard against unauthorized access of ePHI<\/h2>\n<div class=\"text-content\">\n<p>As encryption <strong>is needed,<\/strong> you will need to <strong>guard against unauthorized access of ePHI<\/strong> during electronic transmission.&nbsp;<\/p>\n<p><strong>Create<\/strong> and <strong>upload<\/strong> a <strong>policy<\/strong> that covers<strong> how<\/strong> you will guard against unauthorized access to ePHI.<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"implement-identity-management-and-access-to-ephi-controls\">\n<h2>Implement identity management and access to ePHI controls<\/h2>\n<div class=\"text-content\">\n<p><strong>Answer<\/strong> the following <strong>questions<\/strong> on <strong>identity management<\/strong> and <strong>upload<\/strong> <strong>policies<\/strong> for <strong>terminating<\/strong> <strong>access<\/strong> to ePHI and device recovery.&nbsp;&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Have you assigned unique usernames\/numbers to staff who access ePHI? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload a policy for terminating access to ePHI when an employee leaves an organization or their role changes <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload a policy for recovering all electronic devices containing ePHI when an employee leaves the organization <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"create-and-monitor-ephi-access-logs\">\n<h2>Create and monitor ePHI access logs<\/h2>\n<div class=\"text-content\">\n<p><strong>Answer<\/strong> Yes\/No to the following <strong>questions<\/strong> on ePHI access logs.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Are successful and unsuccessful login attempts documented in ePHI access logs? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Are these ePHI access logs routinely monitored to identify unauthorized accessing of ePHI? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Have you implemented controls to ensure ePHI cannot be altered or destroyed in an unauthorized manner? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"disposal-of-phiephi\">\n<h2>Disposal of PHI\/ePHI:<\/h2>\n<\/section>\n<section id=\"develop-a-policy-for-preventing-phi-from-being-reconstructed\">\n<h2>Develop a policy for preventing PHI from being reconstructed<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> a <strong>policy<\/strong> for rendering <strong>physical PHI unreadable<\/strong>, <strong>indecipherable,<\/strong> and<strong> incapable<\/strong> of being <strong>reconstructed<\/strong> when no longer required.<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"develop-a-policy-for-permanently-erasing-ephi\">\n<h2>Develop a policy for permanently erasing ePHI<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> a <strong>policy<\/strong> for permanently <strong>erasing ePHI<\/strong> on electronic devices when they are no longer required, or the devices reach end of life.<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"confirm-if-devices-containing-ephi-phi-are-stored-securely\">\n<h2>Confirm if devices containing ePHI\/ PHI are stored securely<\/h2>\n<div class=\"text-content\">\n<p><strong>Answer<\/strong> the following<strong> question<\/strong> to <strong>establish<\/strong> if <strong>devices<\/strong> containing <strong>ePHI\/ PHI<\/strong> are stored<strong> securely.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Are electronic devices containing ePHI and physical PHI stored securely, until they are disposed of in a secure fashion? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"patient-access-to-health-information\">\n<h2>Patient Access to Health Information:<\/h2>\n<\/section>\n<section id=\"develop-a-policy-for-patient-access-to-health-information\">\n<h2>Develop a policy for patient access to health information<\/h2>\n<div class=\"text-content\">\n<p><strong>Create<\/strong> and <strong>upload<\/strong> a <strong>policy<\/strong> for providing <strong>patients<\/strong> with <strong>access<\/strong> to their <strong>health information.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: left;\"><strong>This policy must include detailed processes around:<\/strong> <\/p>\n<p>1. providing individuals with<strong> access<\/strong> to their <strong>health information<\/strong> or <strong>copies<\/strong> of their health information <strong>on request&nbsp;&nbsp;<\/strong><\/p>\n<p>2. providing <strong>copies<\/strong> of <strong>PHI<\/strong> in the <strong>format<\/strong> requested by the individual<\/p>\n<p>3. providing <strong>copies<\/strong> of <strong>PHI<\/strong> in the <strong>format<\/strong> requested by the individual<\/p>\n<p>4. providing <strong>individuals<\/strong>&nbsp;with <strong>copies<\/strong> of their<strong> health information<\/strong> in a <strong>timely manner<\/strong> and within <strong>30 days<\/strong><\/p>\n<p>5. <strong>reasonable<\/strong> and cost-based <strong>fees<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"obtaining--storing-authorizations\">\n<h2>Obtaining &amp; Storing Authorizations:<\/h2>\n<\/section>\n<section id=\"store-all-hipaa-authorizations\">\n<h2>Store all HIPAA authorizations<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> HIPAA <strong>authorizations<\/strong> for <strong>uses<\/strong> and <strong>disclosures<\/strong> of <strong>PHI, not<\/strong> otherwise <strong>permitted<\/strong> by the <strong>HIPAA Privacy Rule<\/strong>.<\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: left;\"><strong>Stored authorizations must:&nbsp;<br \/><\/strong><br \/>1. be written in plain language<\/p>\n<p>2. state the classes of people to whom PHI will be disclosed<\/p>\n<p>3. include an expiry date&nbsp;<\/p>\n<p>4. contain the individual\u2019s signature and date of signature<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload HIPAA authorizations <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"notice-of-privacy-practices-npp\">\n<h2>Notice of Privacy Practices (NPP):<\/h2>\n<\/section>\n<section id=\"send-the-notice-of-privacy-practices-to-all-patients\">\n<h2>Send the notice of privacy practices to all patients<\/h2>\n<div class=\"text-content\">\n<p><strong>Create<\/strong> and <strong>upload<\/strong> the <strong>notice of privacy<\/strong> in the field <strong>below<\/strong> and <strong>answer<\/strong> the following <strong>questions<\/strong> about the <strong>notice of privacy<\/strong>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the notice of privacy here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Has every patient stated in writing that they have received the notice of privacy practices? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Is the notice of privacy published in a prominent location and on the website? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"develop-a-procedure-for-dealing-with-npp-complaints\">\n<h2>Develop a procedure for dealing with NPP complaints<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> a <strong>procedure<\/strong> for dealing with<strong> complaints<\/strong> about <strong>failures<\/strong> to <strong>comply<\/strong> with the NPP<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload procedure <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"hipaa-privacy-security--breach-notification-rules\">\n<h2>HIPAA Privacy, Security &amp; Breach Notification Rules:<\/h2>\n<\/section>\n<section id=\"develop-policies-for-privacy-security--breach-notification-rules\">\n<h2>Develop policies for privacy, security &amp; breach notification rules<\/h2>\n<div class=\"text-content\">\n<p><strong>Create<\/strong> and <strong>upload<\/strong> <strong>policies<\/strong> for the following:<\/p>\n<ul>\n<li>HIPPA privacy rules<\/li>\n<li>Security rules&nbsp;<\/li>\n<li>Breach notification rules<\/li>\n<\/ul><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>All uploaded policies must include an \u2018\u2019updates\u2019\u2019 section, for annual reviews.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>HIPPA Privacy Rules Policy<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the HIPPA privacy rules policy here: <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of upload: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>The HIPPA privacy rules policy must be reviewed 1 year after the date of the upload.<\/strong><\/p>\n<p>You can either <strong>select<\/strong> the next review <strong>date<\/strong> in the field <strong>below<\/strong>, or you can use the <strong>dynamic due dates<\/strong> feature to <strong>automatically<\/strong> set the <strong>date<\/strong>.<\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Set the review date: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Security Rules Policy<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the security rules policy here <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of upload: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>The security rules policy must be reviewed 1 year after the date of the upload.<\/strong><\/p>\n<p>You can either <strong>select<\/strong> the next review <strong>date<\/strong> in the field <strong>below<\/strong>, or you can use the <strong>dynamic due dates<\/strong> feature to <strong>automatically<\/strong> set the <strong>date.<\/strong><\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_self\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Set the review date: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<h5>Breach Notification Rules Policy<\/h5>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload the breach notification rules policy <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of upload: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>The breach notification rules policy must be reviewed 1 year after the date of the upload.<\/strong><\/p>\n<p>You can either<strong> select<\/strong> the next review <strong>date<\/strong> in the field <strong>below<\/strong>, or you can use the <strong>dynamic due dates<\/strong> feature to <strong>automatically<\/strong> set the <strong>date.<\/strong><\/p>\n<p><strong>Find out more<\/strong> about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_self\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Set the review date: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"ensure-all-staff-have-legally-attested-hipaa-policies--procedures\">\n<h2>Ensure all staff have legally attested HIPAA policies &amp; procedures<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> documentation to <strong>prove<\/strong> that all <strong>staff<\/strong> members have read and <strong>legally attested<\/strong> to the <strong>HIPAA policies<\/strong> and <strong>procedures<\/strong>.<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Upload documentation of legal attestation <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"vendors--business-associates\">\n<h2>Vendors &amp; Business Associates:<\/h2>\n<\/section>\n<section id=\"identify-all-vendors--business-associates\">\n<h2>Identify all vendors &amp; business associates<\/h2>\n<div class=\"text-content\">\n<p><strong>List<\/strong> all your <strong>vendors<\/strong> and <strong>business associates<\/strong> in the field<strong> below.&nbsp;<\/strong><\/p>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> List all vendors and business associates here: <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"create-business-associate-agreements-for-business-associates\">\n<h2>Create Business Associate Agreements for business associates<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> Business Associate Agreements (BAA's) for all <strong>business associates<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> BAA's <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of BAA upload: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p class=\"style-info\" style=\"text-align: center;\"><strong>All BAA's must be reviewed after 1 year.<\/strong><\/p>\n<p>You can either select the next review date in the field below, or you can use the dynamic due dates feature to automatically set the date.<\/p>\n<p>Find out more about setting dynamic due dates&nbsp;<a href=\"https:\/\/www.process.st\/help\/docs\/dynamic-due-dates\/\" rel=\"nofollow noopener\" target=\"_blank\" title=\"here\">here<\/a>.&nbsp;<\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Review date: <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"assess-business-associates-hipaa-compliance\">\n<h2>Assess business associates HIPAA compliance<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> business associates HIPAA<strong> compliance<\/strong> <strong>assessments.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Business associates HIPAA assessments <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"create-confidentiality-agreements-for-nonbusiness-associates\">\n<h2>Create confidentiality agreements for non-business associates<\/h2>\n<div class=\"text-content\">\n<p><strong>Upload<\/strong> confidentiality <strong>agreements<\/strong> for <strong>non-business<\/strong> <strong>associate<\/strong> vendors here:<\/p>\n<\/p><\/div>\n<div class=\"file-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Confidentiality agreements <\/label> <\/p>\n<div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"sources\">\n<h2>Sources:<\/h2>\n<div class=\"text-content\">\n<h4 style=\"text-align: center;\">Sources&nbsp;<\/h4>\n<ul>\n<li><a href=\"https:\/\/phoenixnap.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Phoenix Nap<\/a> - <a href=\"https:\/\/phoenixnap.com\/blog\/hipaa-compliance-checklist\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Compliance Checklist: How Do I Become Compliant?<\/a><\/li>\n<li><a href=\"https:\/\/www.truevault.com\/\" rel=\"nofollow noopener\" target=\"_blank\">True Vault<\/a> - <a href=\"https:\/\/www.truevault.com\/blog\/how-do-i-become-hipaa-compliant.html\" rel=\"nofollow noopener\" target=\"_blank\">How do I become HIPAA compliant? (a checklist)<\/a><\/li>\n<li><a href=\"\/\/www.securitymetrics.com\" rel=\"nofollow noopener\" target=\"_blank\">Security Metrics<\/a> - <a href=\"https:\/\/www.securitymetrics.com\/blog\/hipaa-faq\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA FAQ: What Is HIPAA?<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal -&nbsp;<\/a><a href=\"https:\/\/www.hipaajournal.com\/what-is-hipaa-certification\/\" rel=\"nofollow noopener\" target=\"_blank\">What is HIPAA Certification?<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a>&nbsp;- <a href=\"http:\/\/HIPAA-Journal-HIPAA-Compliance-Checklist.pdf\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Compliance Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.hhs.gov\/\" rel=\"nofollow noopener\" target=\"_blank\">HHS.Gov<\/a> - <a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/compliance-enforcement\/index.html\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Enforcement<\/a><\/li>\n<li><a href=\"https:\/\/healthitsecurity.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Health IT Security<\/a> - <a href=\"https:\/\/healthitsecurity.com\/news\/32m-patient-records-breached-in-first-half-of-2019-88-caused-by-hacking\" rel=\"nofollow noopener\" target=\"_blank\">32M Patient Records Breached in First Half of 2019, 88% Caused by Hacking<\/a><\/li>\n<li><a href=\"https:\/\/www.securitymetrics.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Security Metrics<\/a> - <a href=\"https:\/\/www.securitymetrics.com\/blog\/what-hipaa-compliance-and-how-long-will-it-take\" rel=\"nofollow noopener\" target=\"_blank\">What Is HIPAA Compliance, And How Long Will It Take?<\/a><\/li>\n<li><a href=\"http:\/\/www.coveringkidsandfamilies.org\/\" rel=\"nofollow noopener\" target=\"_blank\">Covering Kids &amp; Familie<\/a>s - <a href=\"http:\/\/www.coveringkidsandfamilies.org\/resources\/docs\/HIPAAQA.pdf\" rel=\"nofollow noopener\" target=\"_blank\">Questions and Answers about the HIPAA Privacy Rule and CKF Participants<\/a><\/li>\n<li><a href=\"https:\/\/compliancy-group.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Compliancy Group<\/a> - <a href=\"https:\/\/compliancy-group.com\/what-is-hipaa-compliance\/\" rel=\"nofollow noopener\" target=\"_blank\">What is HIPAA Compliance?<\/a><\/li>\n<li><a href=\"https:\/\/evisit.com\/\" rel=\"nofollow noopener\" target=\"_blank\">eVisit<\/a> - <a href=\"https:\/\/evisit.com\/resources\/hipaa-guide\/\" rel=\"nofollow noopener\" target=\"_blank\">The Ultimate HIPAA Guide<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a>&nbsp;- <a href=\"https:\/\/www.hipaajournal.com\/memorial-hermann-health-system-hit-2-4-million-hipaa-fine-8802\/\" rel=\"nofollow noopener\" target=\"_blank\">Memorial Hermann Health System Hit with $2.4 Million HIPAA Fine<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a> - <a href=\"https:\/\/www.hipaajournal.com\/who-does-hipaa-apply-to\/\" rel=\"nofollow noopener\" target=\"_blank\">Who Does HIPAA Apply To?<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a>&nbsp;- <a href=\"https:\/\/www.hipaajournal.com\/ucla-hospitals-receives-865k-hipaa-fine-failing-protect-celebrity-medical-records\/\" rel=\"nofollow noopener\" target=\"_blank\">UCLA Hospitals Receives $865K HIPAA Fine for Failing to Protect Celebrity Medical Records<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a>&nbsp; - <a href=\"https:\/\/www.hipaajournal.com\/1-55-m-hipaa-settlement-baa-risk-analysis-failures-3358\/\" rel=\"nofollow noopener\" target=\"_blank\">$1.55 Million HIPAA Settlement for Lack of BAA and Risk Analysis Failures<\/a><\/li>\n<li><a href=\"https:\/\/www.hipaajournal.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HIPAA Journal<\/a>&nbsp;-<a href=\"https:\/\/www.hipaajournal.com\/ocr-record-hipaa-settlement-memorial-healthcare-system-8695\/\" rel=\"nofollow noopener\" target=\"_blank\"> Record HIPAA Settlement Announced: $5.5 Million Paid by Memorial Healthcare System<\/a><\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"related-checklists\">\n<h2>Related Checklists:<\/h2>\n<div class=\"text-content\">\n<h4 style=\"text-align: center;\">Related Checklists<\/h4>\n<ul>\n<li><a href=\"https:\/\/www.process.st\/templates\/employee-background-check\/\" rel=\"nofollow noopener\" target=\"_blank\">Employee Background Check<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/employee-relations\/\" rel=\"nofollow noopener\" target=\"_blank\">Employee Relations<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/performance-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Performance Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/performance-review-template\/\" rel=\"nofollow noopener\" target=\"_blank\">Performance Review Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/recruitment-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Recruitment Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/how-to-streamline-the-hiring-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Ari Meisel's How to Streamline the Hiring Process Guide<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/diversity-hiring\/\" rel=\"nofollow noopener\" target=\"_blank\">Diversity Checklist Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/diversity-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Diversity Management Monthly Audit<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/diversity-questions\/\" rel=\"nofollow noopener\" target=\"_blank\">Diversity Questions Survey<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/diversity-training\/\" rel=\"nofollow noopener\" target=\"_blank\">Diversity Training Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#copywriter\" rel=\"nofollow noopener\" target=\"_blank\">Copywriter Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#customermanager\" rel=\"nofollow noopener\" target=\"_blank\">Customer Service Manager Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#customerrep\" rel=\"nofollow noopener\" target=\"_blank\">Customer Service Representative Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#editor\" rel=\"nofollow noopener\" target=\"_blank\">Editor Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#graphic\" rel=\"nofollow noopener\" target=\"_blank\">Graphic Designer Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#HR\" rel=\"nofollow noopener\" target=\"_blank\">HR Manager Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#IT\" rel=\"nofollow noopener\" target=\"_blank\">IT Manager Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#marketing\" rel=\"nofollow noopener\" target=\"_blank\">Marketing Manager Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#receptionist\" rel=\"nofollow noopener\" target=\"_blank\">Receptionist Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#sales\" rel=\"nofollow noopener\" target=\"_blank\">Sales Manager Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#software\" rel=\"nofollow noopener\" target=\"_blank\">Software Developer Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#web\" rel=\"nofollow noopener\" target=\"_blank\">Web Designer Job Description Template<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/accountant-job-description-template\/#webdev\" rel=\"nofollow noopener\" target=\"_blank\">Web Developer Job Description Template<\/a><\/li>\n<li>\n<p><a href=\"https:\/\/www.process.st\/templates\/training-plan-template\/\" rel=\"nofollow noopener\" target=\"_blank\">Training Plan Template<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.process.st\/templates\/training-plan-template\/\" rel=\"nofollow noopener\" target=\"_blank\"><\/a><a href=\"https:\/\/www.process.st\/templates\/employee-evaluation-form\/\" rel=\"nofollow noopener\" target=\"_blank\">Employee Evaluation Form<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.process.st\/templates\/employee-evaluation-form\/\" rel=\"nofollow noopener\" target=\"_blank\"><\/a><a href=\"https:\/\/www.process.st\/templates\/employee-transition-plan\/\" rel=\"nofollow noopener\" target=\"_blank\">Employee Transition Plan<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.process.st\/templates\/employee-transition-plan\/\" rel=\"nofollow noopener\" target=\"_blank\"><\/a><a href=\"Gap%20Analysis%20Template\" rel=\"nofollow\">Gap Analysis Template<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Gap%20Analysis%20Template\" rel=\"nofollow\"><\/a><a href=\"HR%20Strategic%20Plan\" rel=\"nofollow\">HR Strategic Plan<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"HR%20Strategic%20Plan\" rel=\"nofollow\"><\/a><a href=\"Employee%20Satisfaction%20Survey\" rel=\"nofollow\">Employee Satisfaction Survey<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Employee%20Satisfaction%20Survey\" rel=\"nofollow\"><\/a><a href=\"Workforce%20Planning%20Template\" rel=\"nofollow\">Workforce Planning Template<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Workforce%20Planning%20Template\" rel=\"nofollow\"><\/a><a href=\"Employee%20Development%20Plan%20Template\" target=\"_self\" rel=\"nofollow noopener\">Employee Development Plan Template<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Holiday%20Leave%20Application%20Checklist\" rel=\"nofollow\">Holiday Leave Application Checklist<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Holiday%20Leave%20Application%20Checklist\" rel=\"nofollow\"><\/a><a href=\"Vacation%20Request%20Form\" rel=\"nofollow\">Vacation Request Form<\/a><\/p>\n<\/li>\n<li>\n<p><a href=\"Vacation%20Request%20Form\" rel=\"nofollow\"><\/a><a href=\"Business%20Needs%20Assessment\" rel=\"nofollow\">Business Needs Assessment<\/a><\/p>\n<\/li>\n<\/ul><\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction to the HIPAA Checklist for HR: In 1996, the United States Government passed a&nbsp;legislation&nbsp;for the privacy and safeguarding of all medical data.&nbsp; This legislation is known as the Health Insurance Portability and Accountability Act, but is more commonly referred to as HIPPA (which is thankfully, easier to remember). Anyone in the healthcare industry who&nbsp;deals [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":21609,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"","cover_icon_url":"","tasks_count":"43","template_description":"Use this checklist to evaluate your organization and ensure you are HIPAA compliant.","template_id":"hz5QtalKUbDPWwXpqwtPlQ","task_0":"Introduction to the HIPAA Checklist for HR:","task_slug_0":"introduction-to-the-hipaa-checklist-for-hr","task_1":"Complete checklist information","task_slug_1":"complete-checklist-information","task_2":"Assign tasks","task_slug_2":"assign-tasks","task_3":"Annual Audits\/Assessments:","task_slug_3":"annual-auditsassessments","task_4":"Complete the security risk audit","task_slug_4":"complete-the-security-risk-audit","task_5":"Complete the privacy assessment (not required for BA's)","task_slug_5":"complete-the-privacy-assessment-not-required-for-bas","task_6":"Complete the HITECH subtitle D audit","task_slug_6":"complete-the-hitech-subtitle-d-audit","task_7":"Complete the security standards audit","task_slug_7":"complete-the-security-standards-audit","task_8":"Complete the asset and device audit","task_slug_8":"complete-the-asset-and-device-audit","task_9":"Complete the physical site audit","task_slug_9":"complete-the-physical-site-audit","task_10":"HIPAA Training:","task_slug_10":"hipaa-training","task_11":"Ensure all staff complete the annual HIPAA training","task_slug_11":"ensure-all-staff-complete-the-annual-hipaa-training","task_12":"Ensure all staff complete the security awareness training","task_slug_12":"ensure-all-staff-complete-the-security-awareness-training","task_13":"Set quarterly reminders to reinforce security awareness training","task_slug_13":"set-quarterly-reminders-to-reinforce-security-awareness-training","task_14":"Emergency Planning:","task_slug_14":"emergency-planning","task_15":"Develop plans for emergencies","task_slug_15":"develop-plans-for-emergencies","task_16":"Access to ePHI:","task_slug_16":"access-to-ephi","task_17":"Assess whether encryption of ePHI is needed","task_slug_17":"assess-whether-encryption-of-ephi-is-needed","task_18":"Implement alternative measures","task_slug_18":"implement-alternative-measures","task_19":"Guard against unauthorized access of ePHI","task_slug_19":"guard-against-unauthorized-access-of-ephi","task_20":"Implement identity management and access to ePHI controls","task_slug_20":"implement-identity-management-and-access-to-ephi-controls","task_21":"Create and monitor ePHI access logs","task_slug_21":"create-and-monitor-ephi-access-logs","task_22":"Disposal of PHI\/ePHI:","task_slug_22":"disposal-of-phiephi","task_23":"Develop a policy for preventing PHI from being reconstructed","task_slug_23":"develop-a-policy-for-preventing-phi-from-being-reconstructed","task_24":"Develop a policy for permanently erasing ePHI","task_slug_24":"develop-a-policy-for-permanently-erasing-ephi","task_25":"Confirm if devices containing ePHI\/ PHI are stored securely","task_slug_25":"confirm-if-devices-containing-ephi-phi-are-stored-securely","task_26":"Patient Access to Health Information:","task_slug_26":"patient-access-to-health-information","task_27":"Develop a policy for patient access to health information","task_slug_27":"develop-a-policy-for-patient-access-to-health-information","task_28":"Obtaining &amp; Storing Authorizations:","task_slug_28":"obtaining--storing-authorizations","task_29":"Store all HIPAA authorizations","task_slug_29":"store-all-hipaa-authorizations","task_30":"Notice of Privacy Practices (NPP):","task_slug_30":"notice-of-privacy-practices-npp","task_31":"Send the notice of privacy practices to all patients","task_slug_31":"send-the-notice-of-privacy-practices-to-all-patients","task_32":"Develop a procedure for dealing with NPP complaints","task_slug_32":"develop-a-procedure-for-dealing-with-npp-complaints","task_33":"HIPAA Privacy, Security &amp; Breach Notification Rules:","task_slug_33":"hipaa-privacy-security--breach-notification-rules","task_34":"Develop policies for privacy, security &amp; breach notification rules","task_slug_34":"develop-policies-for-privacy-security--breach-notification-rules","task_35":"Ensure all staff have legally attested HIPAA policies &amp; procedures","task_slug_35":"ensure-all-staff-have-legally-attested-hipaa-policies--procedures","task_36":"Vendors &amp; Business Associates:","task_slug_36":"vendors--business-associates","task_37":"Identify all vendors &amp; business associates","task_slug_37":"identify-all-vendors--business-associates","task_38":"Create Business Associate Agreements for business associates","task_slug_38":"create-business-associate-agreements-for-business-associates","task_39":"Assess business associates HIPAA compliance","task_slug_39":"assess-business-associates-hipaa-compliance","task_40":"Create confidentiality agreements for non-business associates","task_slug_40":"create-confidentiality-agreements-for-nonbusiness-associates","task_41":"Sources:","task_slug_41":"sources","task_42":"Related Checklists:","task_slug_42":"related-checklists","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[12,7],"tags":[],"class_list":["post-21608","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-human-resources","category-miscellaneous"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=21608"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21608\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/21609"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=21608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=21608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=21608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}