Framework workspace

HIPAA controls

Administrative, physical, and technical safeguards for protected health information. Work through each control, record implementation status, and keep evidence notes ready for review.

0%

Weighted score

HIPAA-AC-01

Unique user identification

Assign unique identities for workforce access to electronic PHI.

Weight 5

Not Started

Saved to your evidence record

HIPAA-AC-02

Emergency access procedure

Document controlled emergency access to critical health systems.

Weight 4

Not Started

Saved to your evidence record

HIPAA-AC-03

Automatic logoff

Terminate inactive sessions based on system risk.

Weight 3

Not Started

Saved to your evidence record

HIPAA-DP-01

PHI encryption

Encrypt electronic PHI at rest and in transit.

Weight 5

Not Started

Saved to your evidence record

HIPAA-DP-02

Integrity controls

Protect electronic PHI from improper alteration or destruction.

Weight 5

Not Started

Saved to your evidence record

HIPAA-DP-03

Media disposal

Securely dispose of media containing health information.

Weight 4

Not Started

Saved to your evidence record