HIPAA Quiz - Medcurity

Step 1 of 14

Has your organization conducted a Risk Assessment in the last calendar year?*

Yes	No	Not Sure

Reference: Risk Assessment

Citation: 164.308(a)(1)(ii)(A)

Do you have encryption enabled on your devices that access ePHI?*

Yes	No	Not Sure

Reference: Encryption

Citation: 164.312(e)(2)(ii)

Do you have a policy or procedure to ensure that your servers, workstations, and other access devices are consistently updated with the latest security patches and operating system updates?*

Yes	No	Not Sure

Reference: Protection from Malicious Software

Citation: 164.308(a)(5)(ii)(B)

Have you recently conducted a vulnerability scan on your organization's network and information systems to identify security weaknesses and potential breaches?*

Yes	No	Not Sure

Reference: Risk Assessment

Citation: 45 CFR 164.308(A)(8)

Do you have a designated Security Officer responsible for implementing and overseeing HIPAA compliance?*

Yes	No	Not Sure

Reference: Assigned Security Responsibility

Citation: 164.308(a)(2)

Do you have a process to review any information system activity for your organization?*

Yes	No	Not Sure

Reference: Information System Activity

Citation: 164.308(a)(1)(ii)(D)

Is there a process in place for reviewing your policies and procedures on a regular basis, and do you update them when necessary?*

Yes	No	Not Sure

Reference: Updates

Citation: 164.316(b)(2)(iii)

Do you have a policy and procedure in place that addresses the secure disposal of all computer media and equipment?*

Yes	No	Not Sure

Reference: Disposal

Citation: 164.310(d)(2)(i)

Has your organization implemented regular training sessions and updates to maintain ongoing security awareness among employees, ensuring HIPAA compliance?*

Yes	No	Not Sure

Reference: Security Reminders

Citation: 164.308(a)(5)(ii)(A)

Have you established clear and specific access permissions to information systems for each role within your organization?*

Yes	No	Not Sure

Reference: Workforce Security

Citation: 164.308(a)(3)(i)

Is there a current and adequate Business Associate Agreement (BAA) in place that complies with the HIPAA Security Rule for all relevant business associates?*

Yes	No	Not Sure

Reference: Workforce Security

Citation: 164.308(b)(3)

Have you established a policy and procedure that includes a backup and restoration plan to recover vital system functionality and data during an emergency? (This plan may be integrated within your Contingency Plan.)*

Yes	No	Not Sure

Reference: Data Recovery Planning and Procedures

Citation: 164.308(a)(7)(ii)(B)

Are you participating in the Merit-Based Incentive Payment System (MIPS) for quality reporting and reimbursement under Medicare?*

Yes	No	Not Sure

Reference: Promoting Interoperability and EHR Reporting Period

Citation: 164.308(a)(1)

Thank you for completing our HIPAA compliance survey! Based on your answers, we would love to offer you a free, no-obligation consultation to help guide you through any compliance concerns or questions you may have. Simply provide your contact information below, and one of our experts will reach out shortly.

Name*

First Last

Phone Number*

Company Name*

Job Title

Email Address*

HIPAA Compliance Quiz

CONTACT US

Solutions

Company

Links