Appendix_7.4_HIPAA_Business_Associate_Assessment.xlsx
XLSX spreadsheet 12 KB Posted
- Solicitation number
- RFP 31786-00187
- Issued by
- Davidson County, Tennessee
About this file
The file is a HIPAA Business Associate Assessment spreadsheet designed to evaluate an organization's compliance with HIPAA privacy and security regulations. The document consists of a comprehensive questionnaire with 11 key questions assessing the organization's handling of Protected Health Information (PHI), requiring "Yes" or "No" responses and additional details for specific line items.
The assessment covers critical areas of HIPAA compliance, including PHI location tracking, designated privacy and security officers, annual risk assessments, policy updates, employee training, compliance plan documentation, business associate agreements, and disaster recovery planning. The spreadsheet is structured to help an organization self-evaluate its HIPAA readiness by providing specific prompts about privacy protocols, security measures, training procedures, and contingency planning. Key areas of focus include verifying PHI management, confirming staff training on privacy procedures, ensuring comprehensive disaster recovery strategies, and maintaining up-to-date compliance documentation.
View the file
Other files
Show 40 more
Latest 50 of 81 listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| HIPAA Business Associate Assessment | |||
| Mark "Yes" or "No" for each question Provide requested information. | |||
| Name of Organization: | |||
| QUESTION: | YES | NO | Please provide additional information - lines 11, 24, and 26 ONLY |
| 1. Do you know where all Protected Health Information is located |
in your company? (Electronic and Physical)
| 2. Does your company have a designated Privacy Officer? |
| Provide the Privacy Officer's Name and Contact Information: |
| 3. Does your company have a designated Security Officer? |
| Provide the Security Officer's Name and Contact Information: |
| 4. Has your company completed an Annual Risk Assessment? |
| Provide Date Last Risk Assessment was completed: |
| 5. Has your company created or updated HIPAA Privacy & Security Policies & Procedures since February 2013? |
| Provide Date of Last Update for Privacy & Security Policies & Procedures: |
| 6. Have all employees that have access to PHI completed the training on HIPAA Privacy & Security? |
| 7. Have all employees that have access to PHI completed training for your company's HIPAA Policies & Procedures within the last year? |
| Explain how employees are trained and how you track their completion: |
| 8. Is your HIPAA Compliance Plan completed and stored in a location where all staff members can find it? |
| Provide Date HIPAA Compliance Plan was enacted and where it is located: |
| 9. Do you have an Agreement with every Business Associate or |
Subcontractor that may have access to PHI?
| Provide list of Agreements: |
| 10. Do you currently have Disaster Recovery Plan? |
| When did you last update the Plan? |
| 11. If you have a Disaster Recovery Plan, have you tested it? |
| Provide Date Disaster Recovery Plan was last tested: |
Appendix 7.4
Sheet2
Sheet3
File details come from the government source that posted it. Updated .