1. Do you have a designated HIPAA Privacy and Security Officer?
Yes Partial No

2. Are regular risk assessments performed on ePHI systems?
Yes Partial No

3. Is ePHI encrypted both in transit and at rest?
Yes Partial No

4. Do all users have unique IDs and access is role-based?
Yes Partial No

5. Is physical access to ePHI systems controlled?
Yes Partial No

6. Are policies in place for device/media disposal?
Yes Partial No

7. Is HIPAA training provided to all workforce members?
Yes Partial No

8. Do you have a breach notification plan?
Yes Partial No

9. Are Business Associate Agreements (BAAs) in place?
Yes Partial No