





INCLUDED SAMPLE POLICIES & PROCEDURES:
Administrative Safeguards:
- Risk Analysis Policy
- Risk Management Procedures Policy
- Sanction Policy
- Information System Activity Review Policy
- Assigned Security Responsibility Policy
- Authorization and/or Supervision Policy
- Workforce Clearance Policy
- Termination Procedures Policy
- Access Authorization Policy
- Access Establishment and Modification Policy
- Security Reminders Policy
- Protection From Malicious Software Policy
- Log-In Monitoring Policy
- Password Management Policy
- Security Incident Procedures Policy
- Data Backup Plan
- Disaster Recovery Plan
- Emergency Mode Operation Plan
- Testing and Revision Procedure Policy
- Applications and Data Criticality Analysis Policy
- Evaluation Policy
- Business Associate Policy
- Documentation Policy
- HIPAA Compliance Training Policy
Physical Safeguards:
- Contingency Operation Policy
- Facility Security Plan
- Access Control and Validation Procedures Policy
- Maintenance Records Policy
- Workstation Use Policy
- Workstation Security Policy
- Device and Media Disposal Policy
- Media Re-Use Policy
- Accountability Policy
- Data Backup and Storage Policy
Technical Safeguards:
- Unique User Identification Policy
- Emergency Access Procedures Policy
- Automatic Logoff Policy
- Encryption and Decryption Policy
- Audit Controls Policy
- Mechanism To Authenticate PHI Policy
- Person Or Entity Authentication Policy
- Integrity Controls Policy