Employee has received HIPAA training.

• Yes

• No

Employee understands all the HIPAA regulations.

• Yes

• No

Employee signed HIPAA compliance agreement.

• Yes

• No

Employee awareness of penalties for non-compliance.

• Yes

• No

Employee has access to appropriate data protection tools.

• Yes

• No

Employee briefed on HIPAA violation reporting system.

• Yes

• No

Did your department implement HIPAA regulation updates?

• Yes

• No

Are [YOUR COMPANY NAME]'s policies HIPAA compliant?

• Yes

• No

Does [YOUR COMPANY NAME] securely encrypt health data?

• Yes

• No

Did the employee undergo annual HIPAA training?

• Yes

• No

Does the employee know the PHI handling/disposal process?

• Yes

• No

Can the employee recognize a potential HIPAA violation?

• Yes

• No

Did the employee report any HIPAA violations last year?

• Yes

• No

Are devices storing PHI encrypted?

• Yes

• No

Are security patches and updates applied regularly?

• Yes

• No

Is multi-factor authentication used for accessing PHI?

• Yes

• No

Are there access controls in place for PHI?

• Yes

• No

Does a documented plan exist for PHI breach responses?

• Yes

• No

Are employees trained on the incident response plan?

• Yes

• No

Has the incident response plan been tested?

• Yes

• No

Is there regular auditing of access to PHI?

• Yes

• No

Are logs of access to PHI monitored regularly?

• Yes

• No

Are audit logs retained for the required time period?

• Yes

• No