Appendix_7_10_HIPAA_Business_Associate_Assessment.xlsx

This is a HIPAA Business Associate Assessment document used by state and local contracting agencies to evaluate an organization's compliance with Health Insurance Portability and Accountability Act requirements. The assessment consists of a standardized questionnaire that requires organizations to mark "Yes" or "No" responses for ten compliance categories and provide supporting documentation for specific questions.

The assessment evaluates organizational readiness across critical compliance areas including knowledge of Protected Health Information location, designation of Privacy and Security Officers, completion of annual risk assessments, and updates to privacy and security policies and procedures since February 2013. Additional evaluation criteria include verification that employees with PHI access have completed HIPAA and company-specific training, accessibility of the HIPAA Compliance Plan to staff, execution of Business Associate Agreements with all subcontractors, and implementation and testing of Disaster Recovery Plans. Organizations must provide detailed information for questions 11, 24, and 26, specifically including the date of the most recent Disaster Recovery Plan test. The assessment document is formatted as an Excel spreadsheet with multiple sheets for data entry and tracking responses across the ten required compliance question categories.