Appendix_7_10_HIPAA_Business_Associate_Assessment.xlsx
XLSX spreadsheet 13 KB Posted
- Attached to
- Employee Assistance Program (EAP) and Behavioral Health Organization (BHO) Services - UPDATED
- Solicitation number
- RFP 31786-00188
- Issued by
- Davidson County, Tennessee
About this file
This document is a HIPAA Business Associate Assessment spreadsheet designed to evaluate an organization's compliance with HIPAA privacy and security regulations. The assessment consists of 11 critical questions requiring "Yes" or "No" responses, with specific requests for additional information on selected items. The document seeks comprehensive details about an organization's protected health information (PHI) management, including privacy and security protocols, employee training, compliance planning, and disaster recovery preparedness.
The assessment covers key areas of HIPAA compliance such as identifying PHI locations, designating privacy and security officers, conducting annual risk assessments, updating policies and procedures, employee training tracking, compliance plan accessibility, business associate agreements, and disaster recovery planning. Organizations are required to provide specific dates, names of responsible personnel, and explanations for various compliance activities, with particular emphasis on documenting training processes, agreement details, and the testing of disaster recovery plans. The spreadsheet serves as a critical tool for assessing an organization's readiness and adherence to HIPAA regulatory requirements.
View the file
Other files
Show 40 more
Latest 50 of 76 listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| HIPAA Business Associate Assessment | |||
| Mark "Yes" or "No" for each question Provide requested information. | |||
| Name of Organization: | |||
| QUESTION: | YES | NO | Please provide additional information - lines 11, 24, and 26 ONLY |
| 1. Do you know where all Protected Health Information is located |
in your company? (Electronic and Physical)
| 2. Does your company have a designated Privacy Officer? |
| Provide the Privacy Officer's Name and Contact Information: |
| 3. Does your company have a designated Security Officer? |
| Provide the Security Officer's Name and Contact Information: |
| 4. Has your company completed an Annual Risk Assessment? |
| Provide Date Last Risk Assessment was completed: |
| 5. Has your company created or updated HIPAA Privacy & Security Policies & Procedures since February 2013? |
| Provide Date of Last Update for Privacy & Security Policies & Procedures: |
| 6. Have all employees that have access to PHI completed the training on HIPAA Privacy & Security? |
| 7. Have all employees that have access to PHI completed training for your company's HIPAA Policies & Procedures within the last year? |
| Explain how employees are trained and how you track their completion: |
| 8. Is your HIPAA Compliance Plan completed and stored in a location where all staff members can find it? |
| Provide Date HIPAA Compliance Plan was enacted and where it is located: |
| 9. Do you have an Agreement with every Business Associate or |
Subcontractor that may have access to PHI?
| Provide list of Agreements: |
| 10. Do you currently have Disaster Recovery Plan? |
| When did you last update the Plan? |
| 11. If you have a Disaster Recovery Plan, have you tested it? |
| Provide Date Disaster Recovery Plan was last tested: |
Appendix 7.10
Sheet2
Sheet3
File details come from the government source that posted it. Updated .