HIPAA Readiness Checklist: 12 questions every practice should be able to answer

What it covers

• Do you have a written risk analysis from the last 12 months?
• Is a Security Official formally named?
• Does every remote and email sign-in require multi-factor authentication?
• Are laptops and phones that hold ePHI encrypted?
• Have you restored from backup in the last quarter?
• Is there a signed BAA with every vendor that touches ePHI?
• …and six more.

If you answer "no" or "not sure" to more than three, start with the risk analysis guide.