HIPAA Risk Assessment and Security Rule Playbook Library

  • More in

This HIPAA Risk Assessment and Security Rule Assessment Playbook is based on the U.S. Department of Commerce NIST Special Publication 800-66 Revision 1 – Health Insurance Portability and Accountability Act (HIPAA).

A covered entity is required to comply with all “standards” of the Security Rule and “required” implementation specifications with respect to all electronic private health information (EPHI).  For “addressable” implementation specifications, covered entities must perform an assessment to determine whether the implementation specification is a reasonable and appropriate safeguard for implementation in the covered entity’s environment.  Covered entities are required to document these assessments and all decisions.  The HIPPA Playbook facilitates this process.

The HIPAA Risk Assessment and Security Rule Assessment Playbook addresses the following:

  • Risk Assessment
  • Administrative Safeguards
  • Physical Safeguards
  • Technical Safeguards
  • Organizational Requirements
  • Policies and Procedures and Documentation
Sign up for our newsletter and get the best of GRC Playbook straight to your inbox.