INCLUDED SAMPLE POLICIES & PROCEDURES:

Administrative Safeguards:
  • Risk Analysis Policy
  • Risk Management Procedures Policy
  • Sanction Policy
  • Information System Activity Review Policy
  • Assigned Security Responsibility Policy
  • Authorization and/or Supervision Policy
  • Workforce Clearance Policy
  • Termination Procedures Policy
  • Access Authorization Policy
  • Access Establishment and Modification Policy
  • Security Reminders Policy
  • Protection From Malicious Software Policy
  • Log-In Monitoring Policy
  • Password Management Policy
  • Security Incident Procedures Policy
  • Data Backup Plan
  • Disaster Recovery Plan
  • Emergency Mode Operation Plan
  • Testing and Revision Procedure Policy
  • Applications and Data Criticality Analysis Policy
  • Evaluation Policy
  • Business Associate Policy
  • Documentation Policy
  • HIPAA Compliance Training Policy
Physical Safeguards:
  • Contingency Operation Policy
  • Facility Security Plan
  • Access Control and Validation Procedures Policy
  • Maintenance Records Policy
  • Workstation Use Policy
  • Workstation Security Policy
  • Device and Media Disposal Policy
  • Media Re-Use Policy
  • Accountability Policy
  • Data Backup and Storage Policy
Technical Safeguards:
  • Unique User Identification Policy
  • Emergency Access Procedures Policy
  • Automatic Logoff Policy
  • Encryption and Decryption Policy
  • Audit Controls Policy
  • Mechanism To Authenticate PHI Policy
  • Person Or Entity Authentication Policy
  • Integrity Controls Policy