{"id":31828,"date":"2023-09-24T05:04:51","date_gmt":"2023-09-24T05:04:51","guid":{"rendered":"https:\/\/www.process.st\/templates\/hitrust-compliance-checklist\/"},"modified":"2024-03-05T14:12:40","modified_gmt":"2024-03-05T14:12:40","slug":"hitrust-compliance-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/hitrust-compliance-checklist\/","title":{"rendered":"HITRUST Compliance Checklist"},"content":{"rendered":"\n<section id=\"identify-all-systems-and-data-that-handle-protected-health-information-phi\"> \n <h2>Identify all systems and data that handle Protected Health Information (PHI)<\/h2>\n <div class=\"text-content\">\n   This task involves identifying all systems and data within the organization that handle Protected Health Information (PHI). The goal is to have a comprehensive understanding of where PHI is stored, transmitted, and accessed. By completing this task, we can ensure that appropriate security measures are in place to protect PHI and comply with HITRUST requirements. Are you aware of all the systems and data that handle PHI within your organization? \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> List all systems and data that handle PHI <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"evaluate-existing-security-controls-and-practices\"> \n <h2>Evaluate existing security controls and practices<\/h2>\n <div class=\"text-content\">\n   This task involves evaluating the existing security controls and practices in place within the organization. The purpose is to assess the effectiveness of the current controls and identify any areas that require improvement to meet HITRUST compliance. By completing this task, we can ensure that our security controls are aligned with best practices and provide adequate protection for PHI. What security controls and practices are currently implemented within your organization? \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Describe the existing security controls and practices <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"identify-gaps-in-compliance\"> \n <h2>Identify gaps in compliance<\/h2>\n <div class=\"text-content\">\n   In this task, we will identify any gaps in compliance with HITRUST requirements. By reviewing the evaluation results from the previous task, we can identify areas where our organization falls short of meeting the necessary security standards. The goal is to understand the specific areas that need improvement and develop targeted strategies to address them. Have you identified any gaps in compliance with HITRUST requirements? \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> List the identified gaps in compliance <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"create-a-risk-management-plan\"> \n <h2>Create a risk management plan<\/h2>\n <div class=\"text-content\">\n   This task involves creating a risk management plan to address the identified gaps in compliance. The risk management plan will outline specific actions, responsibilities, and timelines for mitigating the identified risks. By completing this task, we can ensure that we have a structured approach to managing risks and achieving HITRUST compliance. What actions and strategies will be included in the risk management plan? \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Describe the actions and strategies in the risk management plan <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"implement-security-controls-and-practices-to-address-identified-gaps\"> \n <h2>Implement security controls and practices to address identified gaps<\/h2>\n <div class=\"text-content\">\n   In this task, we will implement the necessary security controls and practices to address the identified gaps in compliance. By putting in place the recommended measures, we can strengthen our security posture and ensure that PHI is adequately protected. Are you ready to implement the security controls and practices needed to address the identified gaps? \n <\/div> \n <div class=\"multi-select-content form-field-content\"> \n  <div class=\"form-group\"> <label> List the security controls and practices to be implemented <\/label> \n  <\/div> \n  <ul class=\"items\"> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"train-employees-on-hipaahitrust-requirements-and-company-policies\"> \n <h2>Train employees on HIPAA\/HITRUST requirements and company policies<\/h2>\n <div class=\"text-content\">\n   This task involves providing training to employees on HIPAA\/HITRUST requirements and company policies. The goal is to ensure that all employees are aware of their responsibilities in handling PHI and are knowledgeable about the necessary security measures. By completing this task, we can reduce the risk of human error and ensure a culture of compliance within the organization. What training methods and resources will be used to educate employees? \n <\/div> \n <div class=\"select-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Select a training method <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Online training \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      In-person training \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Webinars \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Training videos \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Written materials \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Select the resources used for training <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Training manuals \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Interactive quizzes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Training presentations \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Case studies \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Role-playing exercises \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"conduct-regular-system-and-security-audits\"> \n <h2>Conduct regular system and security audits<\/h2>\n <div class=\"text-content\">\n   This task involves conducting regular system and security audits to assess the effectiveness of the implemented security controls and practices. By regularly auditing these systems and practices, we can identify any potential vulnerabilities or non-compliance issues and take prompt action to address them. How often will system and security audits be conducted? \n <\/div> \n <div class=\"select-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Audit frequency <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Quarterly \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Bi-annually \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Annually \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Every 2 years \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      As needed \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"establish-a-procedure-for-responding-to-security-incidents\"> \n <h2>Establish a procedure for responding to security incidents<\/h2>\n <div class=\"text-content\">\n   This task requires establishing a procedure for responding to security incidents involving PHI. The procedure should outline the steps to be taken in the event of a security breach or incident, including incident notification, containment, investigation, and recovery. By having a well-defined procedure in place, we can minimize the impact of security incidents and ensure a swift and effective response. Have you established a procedure for responding to security incidents? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Procedure for security incident response <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"maintain-documentation-of-all-compliance-efforts\"> \n <h2>Maintain documentation of all compliance efforts<\/h2>\n <div class=\"text-content\">\n   This task involves maintaining documentation of all compliance efforts related to HITRUST requirements. By keeping thorough and up-to-date documentation, we can demonstrate our commitment to compliance and provide evidence of our efforts to protect PHI. What documentation will be maintained? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Documentation to maintain <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Risk management plan \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Employee training records \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Incident response documentation \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Audit findings and reports \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Compliance assessment results \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"approval-audit-results-review\"> \n <h2>Approval: Audit Results Review<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Conduct regular system and security audits<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"validate-hitrust-compliance-with-an-independent-assessment\"> \n <h2>Validate HITRUST compliance with an independent assessment<\/h2>\n <div class=\"text-content\">\n   This task requires validating HITRUST compliance with an independent assessment. The assessment will evaluate the organization's adherence to HITRUST requirements and determine if any non-compliance issues exist. By completing this task, we can obtain an objective assessment of our compliance status and identify areas that may require remediation. Have you scheduled an independent assessment for HITRUST compliance validation? \n <\/div> \n <div class=\"select-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Independent assessment schedule <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Next quarter \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Next year \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Within the next 6 months \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      As soon as possible \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       5 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No assessment scheduled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"remediate-any-issues-found-in-the-independent-assessment\"> \n <h2>Remediate any issues found in the independent assessment<\/h2>\n <div class=\"text-content\">\n   This task involves remedying any issues or non-compliance findings identified in the independent assessment. By addressing these issues promptly and effectively, we can ensure that the organization achieves full compliance with HITRUST requirements. What action will be taken to remediate the identified issues? \n <\/div> \n <div class=\"textarea-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Actions for issue remediation <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"approval-remediation-plan\"> \n <h2>Approval: Remediation Plan<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Validate HITRUST compliance with an independent assessment<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Remediate any issues found in the independent assessment<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"submit-documentation-and-assessment-results-to-hitrust\"> \n <h2>Submit documentation and assessment results to HITRUST<\/h2>\n <div class=\"text-content\">\n   This task requires submitting the documentation and assessment results to HITRUST for review and approval. By submitting these materials, we seek HITRUST's validation of our compliance efforts and confirmation of our adherence to their requirements. What documentation and assessment results will be submitted to HITRUST? \n <\/div> \n <div class=\"file-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Documentation and assessment results <\/label> \n   <div class=\"file-container\"> <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here <\/button> \n   <\/div> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"rescan-and-reassess-compliance-annually\"> \n <h2>Rescan and reassess compliance annually<\/h2>\n <div class=\"text-content\">\n   This task involves rescanning and reassessing compliance annually to ensure continuous adherence to HITRUST requirements. By conducting regular reassessments, we can identify any changes or new risks that may impact compliance and take appropriate measures to address them. When will the annual rescan and reassessment be conducted? \n <\/div> \n <div class=\"date-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Annual rescan and reassessment date <\/label> \n   <div class=\"date-container\"> <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button> \n   <\/div> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"approval-annual-compliance-review\"> \n <h2>Approval: Annual Compliance Review<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Rescan and reassess compliance annually<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"act-upon-feedback-and-recommendations-from-hitrust\"> \n <h2>Act upon feedback and recommendations from HITRUST<\/h2>\n <div class=\"text-content\">\n   This task requires acting upon feedback and recommendations received from HITRUST after the review of documentation and assessment results. By addressing these recommendations and implementing any necessary changes, we can continuously improve our compliance efforts and strengthen our security controls. How will feedback and recommendations from HITRUST be addressed? \n <\/div> \n <div class=\"text-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Actions to address HITRUST feedback and recommendations <\/label> \n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\"> \n  <\/div> \n <\/div> \n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Identify all systems and data that handle Protected Health Information (PHI) This task involves identifying all systems and data within the organization that handle Protected Health Information (PHI). The goal is to have a comprehensive understanding of where PHI is stored, transmitted, and accessed. By completing this task, we can ensure that appropriate security measures [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udccb","cover_icon_url":"","tasks_count":"17","template_description":"","template_id":"rpTEZKFVMj8Qa2CN4LZLGg","task_0":"Identify all systems and data that handle Protected Health Information (PHI)","task_slug_0":"identify-all-systems-and-data-that-handle-protected-health-information-phi","task_1":"Evaluate existing security controls and practices","task_slug_1":"evaluate-existing-security-controls-and-practices","task_2":"Identify gaps in compliance","task_slug_2":"identify-gaps-in-compliance","task_3":"Create a risk management plan","task_slug_3":"create-a-risk-management-plan","task_4":"Implement security controls and practices to address identified gaps","task_slug_4":"implement-security-controls-and-practices-to-address-identified-gaps","task_5":"Train employees on HIPAA\/HITRUST requirements and company policies","task_slug_5":"train-employees-on-hipaahitrust-requirements-and-company-policies","task_6":"Conduct regular system and security audits","task_slug_6":"conduct-regular-system-and-security-audits","task_7":"Establish a procedure for responding to security incidents","task_slug_7":"establish-a-procedure-for-responding-to-security-incidents","task_8":"Maintain documentation of all compliance efforts","task_slug_8":"maintain-documentation-of-all-compliance-efforts","task_9":"Approval: Audit Results Review","task_slug_9":"approval-audit-results-review","task_10":"Validate HITRUST compliance with an independent assessment","task_slug_10":"validate-hitrust-compliance-with-an-independent-assessment","task_11":"Remediate any issues found in the independent assessment","task_slug_11":"remediate-any-issues-found-in-the-independent-assessment","task_12":"Approval: Remediation Plan","task_slug_12":"approval-remediation-plan","task_13":"Submit documentation and assessment results to HITRUST","task_slug_13":"submit-documentation-and-assessment-results-to-hitrust","task_14":"Rescan and reassess compliance annually","task_slug_14":"rescan-and-reassess-compliance-annually","task_15":"Approval: Annual Compliance Review","task_slug_15":"approval-annual-compliance-review","task_16":"Act upon feedback and recommendations from HITRUST","task_slug_16":"act-upon-feedback-and-recommendations-from-hitrust","task_17":"Commission an annual HITRUST Assurance audit","task_slug_17":"commission-an-annual-hitrust-assurance-audit","task_18":"Act on any recommendations from the audit report","task_slug_18":"act-on-any-recommendations-from-the-audit-report","task_19":"Maintain records of all compliance activities for potential audits","task_slug_19":"maintain-records-of-all-compliance-activities-for-potential-audits","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[74,57],"tags":[],"class_list":["post-31828","post","type-post","status-publish","format-standard","hentry","category-compliance","category-information-security"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=31828"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31828\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=31828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=31828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=31828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}