https://staging-mnhipaa.kinsta.cloud/assessment-question/ 2016-10-19T17:58:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-mitigation-options-for-security-incidents/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-where-and-to-whom-to-report-log-in-discrepancies/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-review-your-current-procedures-and-determine-if-they-were-adequate-and-appropriate-to-respond-to-this-particular-security-incident-and-make-updates-and-changes-as-necessary/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-incident-response-team-or-individual-keep-documentation-of-security-incidents-their-outcomes-including-weaknesses-exploited-and-how-access-to-information-was-gained/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-mechanisms-to-assess-the-effectiveness-of-your-audit-process-and-what-metrics-are-being-used-what-are-they/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/hasdoes-your-organization-use-outside-third-party-vendor-support-to-implement-your-organizations-authentication-methods/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-measures-in-place-to-protect-ephi-during-transmission-what-are-those-measures/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-trained-staff-that-monitor-transmissions/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-given-each-staff-employee-and-workforce-member-a-copy-of-your-security-policies-and-procedures-and-do-they-know-where-to-find-them-on-your-internal-web-or-server-or-other-plac/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-already-have-in-place-or-use-other-methods-to-keep-your-staff-employees-workforce-business-associates-and-contractorsvendors-updated-and-aware-of-security-updates-what-are/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-each-of-your-organizations-contracts-or-agreements-include-expected-outcomes-by-the-business-associate/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-each-of-your-organizations-contracts-or-agreements-include-expected-outcomes-by-the-business-associate-2/ 2015-10-05T21:33:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-information-integrity-process-as-currently-implemented-provide-that-a-high-level-of-assurance-that-information-integrity-is-being-maintained/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organization-policies-and-procedures-identify-methods-of-transmission-that-will-used-to-safeguard-ephi/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organization-policies-and-procedures-identify-tools-and-techniques-that-will-be-used-to-support-the-transmission-security-policy/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-procedures-for-transmitting-ephi-using-hardware-or-software/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-believe-encryption-necessary-to-protect-ephi-during-transmission/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-include-the-following-requirements-andor-specifications-explicitly-or-by-reference-in-information-acquisition-contracts-based-on-the-assessment-of-risk-and-in-accordance-with-2/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-include-the-following-requirements-andor-specifications-explicitly-or-by-reference-in-information-acquisition-contracts-based-on-the-assessment-of-risk-and-in-accordance-with-3/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-file-electronic-andor-paper-monitoring-reports-and-how-are-these-reports-monitored/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-security-policies-and-procedures-take-into-consideration-1-your-organizations-size-complexity-and-the-services-you-provide-2-your-organizations-technical-infrastructure/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-periodic-revaluation-of-your-security-polices-and-procedures-and-update-them-when-necessary/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-all-security-policies-and-procedures/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-update-your-security-documentation-following-breaches-security-incidents-new-acquisitions-change-in-technology-and-other-similar-times/ 2015-10-05T21:33:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-2-maintain-accountability-for-information-system-media-during-transport-outside-of-controlled-areas/ 2015-10-05T21:33:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/in-determining-the-best-way-to-display-evaluation-results-has-your-organizations-written-reports-highlighted-key-findings-and-recommendations-to-be-considered/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-your-organizations-staff-employees-and-workforce-members-duties-separated-so-that-only-the-minimally-necessary-ephi-based-on-the-specific-job-description-is-made-available-upon-request/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-authentication-mechanisms-to-verify-the-identity-of-the-user-accessing-the-system/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-management-regularly-review-the-list-of-access-authorizations-including-remote-access-authorizations-to-verify-that-the-list-is-accurate-and-has-not-been-inappropriately-alt/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-trained-your-staffemployees-with-defined-plan-responsibilities-in-their-roles/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-any-of-your-organizations-staff-employee-or-workforce-members-have-the-technical-experience-to-evaluate-your-systems/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-senior-management-support-for-your-security-evaluation-and-have-they-stated-the-need-for-everyone-within-your-organization-to-participate-in-and-support-your-security-eval/ 2015-10-05T21:33:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-disseminated-its-risk-assessment-procedures-to-the-work-staffoffices-with-the-associated-roles-and-responsibilities/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-all-hardware-and-software-that-maintains-or-transmits-ephi-including-excel-spreadsheets-word-tables-and-other-similar-data-storage-and-included-it-in-your-inventory/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-risk-analysis-and-other-implementation-specifications-for-the-security-management-process/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-check-a-candidates-qualifications-against-a-specific-job-description/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-made-a-determination-of-each-candidate-for-a-specific-position-can-perform-the-tasks-for-that-position/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-made-your-work-staff-aware-of-the-identity-and-roles-of-their-supervisors/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-check-an-applicants-employment-and-educational-references-if-this-is-reasonable-for-such-a-job-description/ 2015-10-05T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-areas-of-your-workstations-to-determine-which-areas-are-more-vulnerable-to-unauthorized-use-theft-or-viewing-of-the-data-do-you-do-this-review-periodically/ 2015-10-07T13:35:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-control-all-maintenance-activities-whether-performed-on-site-or-remotely-and-whether-the-equipment-is-serviced-on-site-or-removed-to-another-location/ 2015-10-07T13:55:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-monitor-physical-access-to-the-information-system-to-detect-and-respond-to-physical-security-incidents/ 2015-10-07T14:03:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-control-physical-access-to-information-system-distribution-and-transmission-lines-including-locked-wiring-closets-disconnected-or-locked-spare-jacks-and-protection-of-cabling/ 2015-10-07T14:28:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-change-combinations-and-keys-periodically-and-when-keys-are-lost-combinations-compromised-or-individuals-are-transferred-or-terminated/ 2015-10-07T14:29:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-control-entry-to-the-facility-containing-the-information-system-using-physical-access-devices-andor-guards/ 2015-10-07T14:31:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-enforce-physical-access-authorization-for-all-physical-access-points-including-designated-entryexit-points-to-the-facility-where-the-information-system-resides/ 2015-10-07T14:35:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-issue-authorization-credentials-such-as-badges-identification-cards-or-smart-cards-for-the-facilities-where-the-information-systems-reside/ 2015-10-07T14:37:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-kept-a-current-list-of-personnel-with-authorized-access-to-the-facility-where-the-information-systems-reside/ 2015-10-07T14:37:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-document-your-correction-measures-decisions-and-actions-how/ 2015-10-07T14:38:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-staff-employees-and-workforce-members-need-facility-access-controls-and-procedures-refresher-training/ 2015-10-07T14:40:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-trained-your-staff-employees-and-workforce-members-in-your-facility-access-controls-and-procedures/ 2015-10-07T14:41:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-normal-and-usual-physical-protections-exist-such-as-locks-on-doors-and-windows/ 2015-10-07T14:45:28+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-all-your-organizations-workstations-protected-from-public-access-and-viewing/ 2015-10-07T14:45:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-encryption-feasible-and-cost-effective-for-your-organization/ 2015-10-07T15:10:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-can-be-done-to-protect-the-ephi-when-is-it-at-rest-in-your-systems-and-tools/ 2015-10-07T15:36:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/have-your-organizations-users-been-trained-on-how-to-use-ephi/ 2015-10-07T15:37:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-all-approved-users-with-the-ability-to-alter-or-destroy-data/ 2015-10-07T15:38:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-plan-to-revise-your-audit-process-when-needed/ 2015-10-07T15:43:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/will-your-organization-file-and-maintain-your-monitoring-reports-where/ 2015-10-07T15:47:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-period-when-audits-will-be-performed/ 2015-10-07T15:49:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-evaluation-include-determination-of-what-changes-and-upgrades-to-your-monitoring-tools-is-reasonable-and-appropriate/ 2015-10-07T15:53:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-are-the-most-appropriate-monitoring-tools-for-your-organization-such-as-third-party-tools-freeware-operating-system-provided-or-home-grown/ 2015-10-07T15:54:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-period-of-activity-prior-to-triggering-the-automatic-log-off/ 2015-10-07T17:02:33+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-train-new-employeesusers-in-your-access-control-policy-and-procedures-and-other-instructions-for-protecting-ephi/ 2015-10-07T17:16:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-contract-include-reporting-the-problem-to-office-for-civil-rights-ocr-if-contract-termination-is-not-possible/ 2015-10-07T17:51:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-the-conditions-for-termination-within-your-organizations-business-associate-contract-include-material-breach-of-the-contract-and-that-the-breach-cannot-be-cured/ 2015-10-07T17:51:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-inventory-include-all-hardware-and-software-that-are-used-to-collect-store-process-or-transmit-ephi-including-excel-spreadsheets-word-tables-and-other-like-data-storage/ 2015-10-19T18:43:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-current-safeguards-protect-against-reasonably-anticipated-uses-and-of-ephi-that-are-not-permitted-by-the-hipaa-privacy-rule/ 2015-10-19T22:30:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-analyze-your-systems-activity-reviewsreports-periodically-how-often/ 2015-10-19T23:56:10+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-it-systems-have-the-capacity-to-set-access-controls/ 2015-10-20T21:58:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-plan-in-place-for-training-to-address-specific-technical-topics-based-on-job-descriptions-and-responsibilities/ 2015-10-20T22:18:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-incorporate-new-information-from-email-advisories-daily-news-web-sites-periodical-and-other-sources-into-your-training-content-and-materials-when-reasonable-and-appropriate/ 2015-10-20T22:19:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-sanctions-have-a-tiered-structure-of-sanctions-that-takes-into-consideration-the-magnitude-of-harm-to-your-organization-and-the-individual-whose-ephi-is-at-risk-and-the-possi/ 2015-10-21T00:27:57+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-someone-or-an-officedepartment-that-is-responsible-for-overall-systems-activity-process-procedures-and-results-who-or-what-office/ 2015-10-21T00:42:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-review-exception-reports-and-logs/ 2015-10-21T00:43:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/have-all-your-organizations-staff-employees-workforce-offices-and-departments-been-notified-of-the-name-and-office-to-contact-with-a-security-problem/ 2015-10-21T01:03:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-and-strategy-that-supports-your-organizations-authorizes-who-are-permitted-to-designate-and-grant-access-to-ephi/ 2015-10-21T01:45:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-how-to-handle-physical-security-and-information-security-issues-with-a-laptop-pda-tablet-smartphone-andor-other-similar-tools/ 2015-10-21T02:58:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-continuously-research-security-issues-and-security-training-do-you-update-your-security-training-content-materials-and-evaluation-with-the-new-information/ 2015-10-21T03:01:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-conduct-new-or-additional-security-training-whenever-changes-occur-in-either-technology-or-practices/ 2015-10-21T03:06:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-incident-response-procedures-with-the-staff-employees-or-workforce-members-with-the-roles-and-responsibilities-related-to-incident-response-solicit-suggestions-for-im/ 2015-10-21T15:08:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-monitor-log-in-attempts-do-your-staff-employees-and-workforce-members-know-of-this-monitoring/ 2015-10-21T15:15:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-update-the-incident-response-procedures-when-your-organizational-needs-change/ 2015-10-21T15:24:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-told-your-staff-employees-and-workforce-members-how-to-and-where-to-report-a-security-incident/ 2015-10-21T15:25:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-an-individual-or-several-individuals-to-speak-for-your-organization-to-the-media-law-enforcement-clients-business-partners-and-others/ 2015-10-21T15:41:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-contingency-policy-and-plan-address-scope-resource-requirements-training-testing-plan-maintenance-and-backup-requirements/ 2015-10-21T16:08:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-scenarios-and-identified-preventive-measures-measures-you-can-do-now-for-each-scenario-that-could-result-in-the-loss-of-a-critical-service-involving-the-use-of-ephi/ 2015-10-21T16:22:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-the-preventable-measures-you-are-considering-affordable-and-practical-for-the-environment/ 2015-10-21T16:26:33+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-all-your-data-backup-procedures-and-made-them-available-to-all-your-staff-employees-and-workforce-members/ 2015-10-21T22:58:20+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-test-during-normal-business-hours/ 2015-10-21T23:28:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/or-must-testing-take-place-during-off-hours/ 2015-10-21T23:29:14+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-test-your-plan-periodically-how-frequently-does-your-organization-test-its-plan/ 2015-10-21T23:31:10+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-timeline-on-when-the-contingency-plan-should-be-revised/ 2015-10-21T23:34:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-cost-effective-strategies-for-recovering-these-critical-services-resources-or-processes/ 2015-10-21T23:53:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-security-policies-specify-that-security-evaluations-will-be-repeated-when-environmental-and-operational-changes-such-as-technology-updates-are-made-that-affect-the-security/ 2015-10-22T00:03:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-frequency-of-security-evaluation-policies-reflect-any-and-all-federal-laws-regulations-and-guidance-documents-that-impact-environmental-or-operational-changes-affecting-the/ 2015-10-22T00:04:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-corporate-legal-and-regulatory-compliance-staff-employees-or-workforce-members-participate-when-you-conduct-your-analysis/ 2015-10-22T00:05:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-considered-management-operational-and-technical-issues-in-your-evaluation/ 2015-10-22T00:06:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-performed-a-periodic-technical-and-nontechnical-evaluation-based-initially-upon-the-standards-implemented/ 2015-10-22T00:07:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-staff-employees-or-workforce-members-have-the-training-necessary-on-security-technical-and-non-technical-issues/ 2015-10-22T00:37:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-formally-communicated-your-security-evaluation-process-to-your-staff-employees-and-workforce-members-who-have-assigned-roles-and-responsibilities-in-your-evaluation-process/ 2015-10-22T00:54:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-evaluation-process-support-the-development-of-security-recommendations/ 2015-10-22T00:56:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-each-security-evaluation-finding-outlined-mediation-options-and-recommendations-and-remediation-decisions/ 2015-10-22T00:57:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-a-process-for-reporting-security-incidents-related-to-the-agreement/ 2015-10-22T01:21:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-in-place-for-terminating-the-contract-and-has-the-business-associate-been-advised-what-conditions-would-warrant-termination/ 2015-10-22T01:24:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-periodically-review-and-reevaluate-your-list-of-business-associates-to-determine-who-has-access-to-ephi-in-order-to-assess-whether-your-list-is-complete-and-current/ 2015-10-22T01:37:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-agreements-and-other-arrangements-include-the-appropriate-training-requirements-as-necessary/ 2015-10-22T01:40:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-criteria-for-measuring-contract-performance/ 2015-10-22T01:43:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-a-process-to-periodically-evaluate-the-effectiveness-of-the-business-associates-security-controls/ 2015-10-22T01:46:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organizations-business-associate-is-a-federal-state-or-local-government-entity-you-may-use-a-memorandum-of-understanding-mou-to-share-ephi-do-you-have-or-need-to-create-an-mou-and-if-s/ 2015-10-22T01:46:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-locks-and-cameras-in-nonpublic-areas-and-are-these-reasonable-and-appropriate-security-controls/ 2015-10-23T22:55:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-all-your-organizations-entrances-and-exits-that-lead-to-locations-with-ephi-secured/ 2015-10-23T22:55:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-periodically-review-and-approve-the-access-list-and-authorization-credentials-removing-form-the-access-list-personnel-no-longer-requiring-access/ 2015-10-23T23:08:06+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-verify-individual-access-authorization-before-granting-access-to-the-facility/ 2015-10-23T23:08:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-who-needs-access-to-your-facilities-and-offices-in-the-event-of-a-disaster/ 2015-10-23T23:12:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-backup-plan-for-access-to-your-facility-andor-the-ephi/ 2015-10-23T23:18:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-documentation-of-your-facility-inventory-physical-maintenance-record-the-history-of-physical-changes-upgrades-and-other-modifications/ 2015-10-23T23:24:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-trained-your-staff-employees-or-workforce-members-in-the-security-requirements-for-ephi-use-in-their-day-to-day-jobs/ 2015-10-24T20:19:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-physical-safeguards-and-other-security-measures-to-minimize-the-possibility-of-inappropriate-access-of-ephi-through-workstations-including-locked-door-screen-barrie/ 2015-10-24T20:37:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-reviewing-and-as-appropriate-modifying-access-authorization-for-existing-users/ 2015-10-25T20:29:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-period-of-activity-prior-to-triggering-the-automatic-log-off-is-deferent-for-specific-parts-of-your-organization/ 2015-10-25T20:55:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-built-in-house-tools-have-automatic-log-off-capabilities-or-can-they-be-modified-to-include-automatic-log-off-capabilities/ 2015-10-25T20:56:37+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-where-your-ephi-is-at-risk-within-your-organization-and-when-you-transmit-it-outside-your-organization/ 2015-10-25T21:13:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-how-your-exception-reports-and-logs-will-be-reviewed/ 2015-10-25T21:25:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-begun-your-logging-and-auditing-procedures/ 2015-10-25T21:30:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-your-audit-system-activated-on-all-your-systems-servers-networks-tools-and-other-similar-areas/ 2015-10-25T21:31:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-plan-to-notify-your-managers-and-other-staff-employees-and-workforce-members-regarding-suspect-activity/ 2015-10-25T21:32:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-formal-documented-process-in-place-to-address-your-systems-and-tools-misuse-abuse-and-fraudulent-activity/ 2015-10-25T21:40:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-audit-trails-established-for-all-accesses-to-ephi/ 2015-10-26T17:33:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/can-your-organization-provide-additional-training-to-decrease-instances-attributable-to-human-errors/ 2015-10-26T17:53:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-formal-documented-authentication-policy-and-procedures-and-communicated-them-to-your-organizations-staff-employees-and-workforce-members/ 2015-10-26T18:09:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-authentication-methods-require-the-validity-of-a-transmission-source-andor-verifying-an-individuals-claim-of-authorization-privileges-to-ephi/ 2015-10-26T18:12:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organization-uses-passwords-for-individual-access-to-ephi-are-they-unique-by-individual/ 2015-10-26T18:13:38+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-the-selected-authentication-methods-into-your-organizations-systems-networks-applications-and-tools/ 2015-10-26T18:14:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-completed-user-and-support-staff-training-on-your-person-and-entity-authentication-policies-and-procedures/ 2015-10-26T18:15:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-include-the-following-requirements-andor-specifications-explicitly-or-by-reference-in-information-acquisition-contracts-based-on-the-assessment-of-risk-and-in-accordance-with/ 2015-10-26T18:44:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-education-training-and-awareness-activities-include-the-availability-of-your-security-documentation/ 2015-10-26T19:34:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-in-place-to-solicit-input-from-the-staff-employees-and-workforce-impacted-into-your-updates-of-your-security-policies-and-procedures/ 2015-10-26T19:34:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-1-protect-and-control-your-defined-types-of-digital-and-non-digital-media-during-transport-outside-of-controlled-areas-using-your-organizational-security-measures/ 2015-10-27T14:37:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-protected-against-all-reasonably-anticipated-threats-or-hazards-to-the-security-and-integrity-of-ephi/ 2015-11-03T18:28:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-the-types-of-information-and-uses-of-that-information-and-the-sensitivity-of-each-type-of-information-been-evaluated-also-link-to-fips-199-and-sp-800-60-for-more-on-c/ 2015-11-06T18:09:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-all-information-systems-that-house-ephi/ 2015-11-06T18:11:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/what-are-your-organizations-current-and-planned-controls-do-you-have-them-formally-documented/ 2015-11-06T18:50:38+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-assigned-responsibility-to-check-all-hardware-and-software-including-hardware-and-software-used-for-remote-access-to-determine-whether-selected-security-settings-are-enabled/ 2015-11-06T18:51:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-analysis-of-current-safeguards-and-their-effectiveness-relative-to-the-identified-risks/ 2015-11-06T18:53:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-current-safeguards-ensure-the-confidentiality-integrity-and-availability-of-all-ephi/ 2015-11-06T19:02:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-formal-and-documented-system-security-plan/ 2015-11-06T19:05:06+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-and-documented-contingency-plan/ 2015-11-06T19:06:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-communication-plan-or-a-process-for-communicating-policies-and-procedures-to-your-appropriate-staff-member-office-and-all-your-workforce/ 2015-11-06T19:08:39+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-procedure-or-communication-plan-of-how-and-when-your-managers-and-staff-employees-and-workforce-will-be-notified-of-suspected-inappropriate-activity/ 2015-11-06T20:16:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-sanction-policy-for-staff-employee-or-workforce-violations/ 2015-11-06T20:32:37+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-defined-roles-and-responsibilities-for-all-job-functions/ 2015-11-06T20:42:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-assigned-appropriate-levels-of-security-level-oversight-training-and-access-to-each-role/ 2015-11-06T20:44:14+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-written-job-descriptions-that-are-correlated-with-appropriate-levels-of-access/ 2015-11-06T20:52:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-established-set-of-qualifications-for-each-job-description/ 2015-11-06T20:55:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-and-documented-procedures-for-obtaining-the-necessary-and-appropriate-sign-offs-within-your-organizational-structure-to-both-grant-and-terminate-access-to-ephi/ 2015-11-06T21:01:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-procedure-to-deactivate-computer-and-other-electronic-tools-access-accounts-including-the-process-that-will-disable-user-ids-and-passwords/ 2015-11-06T21:05:28+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-formally-documented-your-ephi-access-control-method-does-your-organization-use-identity-based-role-based-biometric-based-proximity-based-other-means-of-access-or-a-combina/ 2015-11-06T21:52:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-job-descriptions-accurately-reflect-assigned-duties-responsibilities-and-enforcement-of-segregation-of-duties/ 2015-11-06T21:55:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-stronger-access-controls-for-sensitive-data/ 2015-11-06T22:03:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-an-outline-of-your-organizations-specific-policies-and-procedures-that-require-security-awareness-and-training/ 2015-11-07T00:06:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-scope-of-the-awareness-and-training-program/ 2015-11-07T00:08:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-your-target-audiences/ 2015-11-07T00:10:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-your-goals/ 2015-11-09T21:26:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-learning-objectives/ 2015-11-09T21:27:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-deployment-methods/ 2015-11-09T21:29:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-evaluation-of-the-training-through-designated-measurement-techniques/ 2015-11-09T21:30:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-the-frequency-of-training/ 2015-11-09T21:31:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-a-procedure-in-place-to-ensure-that-everyone-in-your-organization-receives-security-awareness-training/ 2015-11-09T21:33:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-selected-topics-to-be-included-in-your-training-content-materials-and-methods/ 2015-11-09T21:35:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-whom-to-contact-in-case-of-a-security-incident-and-the-procedures-to-handle-the-incident/ 2015-11-09T21:36:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-and-understand-the-consequences-of-their-noncompliance-with-your-organizations-security-policies-and-procedures/ 2015-11-09T21:37:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-sanctions-to-impose-on-staff-employees-and-workforce-if-they-do-not-complete-the-required-security-training/ 2015-11-09T21:41:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-keep-your-security-awareness-and-training-program-current-by-updating-it-periodically-what-is-the-review-and-update-period/ 2015-11-09T21:42:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-provide-security-awareness-training-with-all-new-hires-before-they-are-given-access-to-ephi/ 2015-11-09T21:50:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-how-it-will-respond-to-a-security-incident-are-there-a-formal-documented-policy-and-procedures/ 2015-11-09T22:28:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-analyzed-these-problems-and-created-a-mitigation-plan-that-it-is-working-to-decrease-risks-and-vulnerabilities/ 2015-11-09T22:34:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-procedure-for-reporting-and-handling-security-incidents/ 2015-11-09T22:36:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-prioritized-your-key-functions-to-determine-what-would-need-to-be-restored-first-in-the-event-of-a-disruption/ 2015-11-09T22:39:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-standard-incident-reporting-templates-to-ensure-that-all-necessary-information-related-to-an-incident-is-documented-and-investigated/ 2015-11-09T22:41:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-information-and-when-data-will-be-disclosed-to-the-media/ 2015-11-09T22:43:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-understand-their-roles-and-responsibilities-in-selecting-a-password-of-appropriate-strength-changing-the-password-periodically-as-requi/ 2015-11-09T22:49:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-employ-malicious-code-protection-mechanisms-at-information-system-entry-and-exit-points-and-at-workstations-servers-or-mobile-computing-devices-on-the-network-to-detect-and-era/ 2015-11-09T22:50:28+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-your-organizations-contingency-plan-framework-roles-and-responsibilities/ 2015-11-09T23:00:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-policy-and-plan-outline-what-critical-services-must-be-provided-within-specific-timeframes/ 2015-11-09T23:02:20+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-policy-and-plan-identify-and-outline-cross-functional-dependencies-to-determine-how-failure-in-one-systems-impacts-other-systems/ 2015-11-09T23:02:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-brain-stormed-and-outlined-alternatives-for-continuing-operations-for-your-organization-if-you-lose-a-critical-function-or-a-critical-resource-remember-there-are-physical-reso/ 2015-11-09T23:04:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-and-implemented-procedures-to-create-and-maintain-retrievable-exact-copies-of-ephi/ 2015-11-10T14:47:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-and-implemented-procedures-to-restore-any-loss-of-ephi/ 2015-11-10T14:49:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-individualsoffice-named-and-responsibilities-assigned-to-conduct-backup-activities/ 2015-11-10T14:51:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-your-key-activities-and-developed-procedures-to-continue-these-key-activities-during-an-emergency/ 2015-11-10T14:58:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-also-identified-critical-functions-that-use-ephi/ 2015-11-10T14:59:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/can-your-organization-assure-the-security-of-the-ephi-in-the-alternative-modes-operation/ 2015-11-10T15:00:33+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-hardware-and-software-and-personnel-are-critical-to-your-organizations-daily-business-operations/ 2015-11-10T15:45:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-impact-on-desired-service-levels-if-these-critical-assets-are-not-available/ 2015-11-10T15:46:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-the-nature-and-degree-of-impact-on-your-operations-if-any-of-the-critical-resources-are-not-available/ 2015-11-10T15:48:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-amount-of-time-your-organization-can-tolerate-disruption-to-these-operations-material-or-services/ 2015-11-10T15:49:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determine-what-if-any-support-is-or-can-be-provided-by-external-providers-including-isps-utilities-or-contractors/ 2015-11-10T15:52:33+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-a-frequency-for-security-evaluations-and-disseminated-this-information-to-your-entire-organization/ 2015-11-10T15:56:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-decided-if-your-evaluation-will-be-conducted-by-your-internal-staff-and-resources-or-by-external-consultants-or-by-a-combination-of-internal-and-external-resources/ 2015-11-10T15:57:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-the-necessary-factors-to-be-considered-in-selecting-an-outside-vendor-including-credentials-and-experience/ 2015-11-10T16:11:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-a-strategy-and-tool-that-considers-all-the-elements-of-the-hipaa-security-rule-including-all-standards-and-implementation-specifications/ 2015-11-10T16:12:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-the-elements-of-each-of-your-organizations-evaluation-procedure-including-questions-statement-and-other-components-address-individual-measurable-security-safeguards-of-ephi/ 2015-11-10T16:13:14+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-in-advance-what-departments-and-staff-employees-andor-workforce-members-will-participate-in-your-security-evaluation/ 2015-11-10T16:15:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-collected-and-documented-all-information-needed-for-your-security-evaluation-by-interviews-surveys-and-output-of-automated-tools-for-example-audit-logging-tools-results-of/ 2015-11-10T16:16:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-a-security-program-with-established-priorities-and-targets-for-continuous-security-improvement/ 2015-11-10T16:23:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-circulate-your-final-report-to-key-staff-employees-and-workforce-members/ 2015-11-10T16:31:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-you-have-a-process-procedures-in-place-to-make-sure-that-the-document-is-available-only-to-those-designated-to-receive-it/ 2015-11-10T16:33:20+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-the-individual-or-department-who-is-responsible-for-coordinating-the-execution-of-your-organizations-business-associate-agreements-and-other-such-agreements/ 2015-11-10T16:44:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-your-systems-and-functions-covered-by-the-contractagreement/ 2015-11-10T16:49:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-your-organizations-outsourced-functions-also-covered-by-contractsagreements/ 2015-11-10T16:53:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-your-organizations-off-shore-functions-also-covered-by-contractsagreements/ 2015-11-10T16:54:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-executed-new-and-updated-existing-agreements-or-arrangements-when-necessary-and-appropriate/ 2015-11-10T17:02:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-agreements-and-other-arrangements-include-your-business-associates-roles-and-responsibilities-for-the-ephi/ 2015-11-10T17:05:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-agreements-and-other-arrangements-specify-how-ephi-is-to-be-transmitted-to-and-from-the-business-associate/ 2015-11-10T17:07:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-documented-procedures-to-facilitate-implementation-of-the-physical-and-environmental-protection-policy-and-associated-physical-and-environmental-controls/ 2015-11-10T17:28:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-inventory-of-your-facilities-and-have-identified-the-vulnerabilities-in-your-current-physical-security-capabilities/ 2015-11-10T17:32:10+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-assigned-degrees-of-significance-to-each-vulnerability-that-you-have-identified/ 2015-11-10T17:38:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-which-types-of-locations-require-access-controls-to-safeguard-ephi-such-as-data-centers-peripheral-equipment-centers-it-staff-offices-workstation-locations-and-o/ 2015-11-10T17:39:14+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-deployed-policies-and-procedures-to-ensure-that-repairs-upgrades-and-or-modifications-are-made-to-your-buildings-and-offices-while-ensuring-that-only-proper-access/ 2015-11-10T17:41:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-periodically-inventory-physical-access-devices/ 2015-11-10T17:45:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-who-is-responsible-for-implementing-the-contingency-plan-for-access-to-ephi-in-each-department-unit-and-other-office-designation-who-is-that-individual/ 2015-11-10T17:52:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/will-your-organizations-contingency-plan-be-appropriate-for-all-types-of-potential-disasters-such-as-fire-flood-and-earthquake/ 2015-11-10T17:56:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/will-your-organization-contingency-plan-be-appropriate-for-all-your-facilities/ 2015-11-10T17:56:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-inventory-identify-points-of-access-to-your-facilities-and-the-existing-security-controls-used-in-these-areas/ 2015-11-10T17:59:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-security-your-facilities-including-the-exterior-the-interior-and-your-equipment/ 2015-11-10T18:00:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-facility-security-plan-in-place-under-revision-or-under-development/ 2015-11-10T18:02:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-periodically-review-your-security-plan-for-the-information-system/ 2015-11-10T18:04:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-periodically-review-physical-access-logs/ 2015-11-11T14:22:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-documented-procedures-to-facilitate-the-implementation-of-your-information-system-maintenance-policy-and-associated-system-maintenance-controls/ 2015-11-11T14:27:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-maintain-records-of-repairs-to-hardware-walls-doors-and-locks/ 2015-11-11T14:30:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-assigned-responsibility-to-an-individual-or-office-for-the-maintenance-to-repair-and-modification-records/ 2015-11-11T14:31:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-require-that-the-designated-official-explicitly-approve-the-removal-of-the-information-system-or-system-components-from-your-organizations-facilities-fro-off-site-maintenance-o/ 2015-11-11T14:32:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-obtain-support-andor-spare-parts-for-you-organizations-security-critical-information-systems-components-or-key-information-technology-components-with-in-a-designated-time-peri/ 2015-11-11T14:39:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-implemented-polices-and-procedures-for-proper-use-and-performance-of-all-types-of-workstations-including-for-day-to-day-operations/ 2015-11-11T14:46:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-inventory-of-workstation-types-and-locations-within-your-organization/ 2015-11-11T14:47:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-an-individual-or-office-responsible-for-this-inventory-and-its-maintenance/ 2015-11-11T14:51:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-implemented-policies-and-procedures-for-each-type-of-workstation-device-including-accommodating-their-unique-issues/ 2015-11-11T14:53:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-that-will-prevent-unauthorized-access-of-unattended-workstations-limit-the-ability-of-unauthorized-persons-to-view-sensitive-information-and-to-di/ 2015-11-11T16:28:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-the-different-ways-workstations-are-accessed-by-staff-employees-workforce-members-and-non-employees/ 2015-11-11T16:55:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-any-of-your-organizations-workstations-located-in-public-areas/ 2015-11-11T16:57:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-which-types-of-access-holds-the-greatest-threat-to-security/ 2015-11-11T17:03:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-protect-information-system-media-until-the-media-are-destroyed-or-sanitized-using-approved-equipment-techniques-and-procedures/ 2015-11-11T17:04:33+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-3-restrict-the-activities-associated-with-transport-of-such-media-to-authorized-personnel/ 2015-11-11T17:10:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-disposal-policies-and-procedures-for-phi-on-paper-and-any-other-non-electronic-mediums/ 2015-11-11T17:16:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-to-assure-that-ephi-is-properly-destroyed-and-cannot-be-recreated/ 2015-11-11T17:18:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-keep-ephi-on-removable-devices-such-as-cds-dvds-zip-drives-tablets-ipads-does-your-organization-have-policies-and-procedures-for-data-disposal-on-these-tools/ 2015-11-11T17:20:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-one-individual-or-department-responsible-for-coordinating-data-disposal-and-reuse-of-hardware-and-software-across-your-enterprise/ 2015-11-11T17:22:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-train-your-staff-employees-and-workforce-members-on-the-security-and-risks-of-ephi-destruction-and-reuse-of-software-and-hardware/ 2015-11-11T17:24:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-inventory-of-the-type-of-media-that-are-used-to-store-ephi-and-is-it-updated-periodically/ 2015-11-11T17:28:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-permit-your-staff-employees-and-workforce-members-to-remove-electronic-media-that-contains-or-can-be-used-to-access-ephi-does-your-organization-have-procedures-to-track-the-m/ 2015-11-11T17:29:38+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-maintain-backup-files-offsite-to-assure-data-availability-in-the-event-of-data-is-lost-while-transporting-or-moving-electronic-media-containing-ephi/ 2015-11-12T19:01:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-regarding-access-to-and-use-of-your-facilities-and-equipment/ 2015-11-12T19:23:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-need-to-update-your-facility-access-control-policies-and-procedures/ 2015-11-12T19:29:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-disseminated-and-periodically-reviewedupdated-your-formal-documented-information-system-maintenance-policy-that-addresses-purpose-scope-roles-responsibilities/ 2015-11-12T19:40:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-classified-your-workstations-based-on-their-capabilities-and-defined-the-tasks-commonly-performed-on-a-given-workstation-or-type-of-workstation/ 2015-11-12T19:45:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-key-operational-risks-that-could-result-in-a-breach-of-security-from-all-types-of-workstations-and-trained-your-staff-employees-and-workforce-members-on-predictable/ 2015-11-12T19:49:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-all-applications-systems-servers-and-other-electronic-tools-that-hold-and-use-ephi/ 2015-11-12T20:39:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-the-user-roles-for-the-applications-systems-servers-and-other-electronic-identified-above/ 2015-11-12T20:43:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-where-the-ephi-supporting-the-electronic-tools-is-currently-housed-i-e-lap-top-network-etc/ 2015-11-12T21:15:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-an-approach-for-access-control/ 2015-11-12T21:19:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-access-capabilities-of-all-your-electronic-tools-that-hold-and-create-ephi-such-as-viewing-data-modifying-data-deleting-data-and-creating-data/ 2015-11-12T21:21:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-implemented-access-control-procedures/ 2015-11-12T21:25:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-access-control-procedures-include-1-initial-access-2-increased-access-3-access-to-different-systems-and-applications-that-user-currently-has/ 2015-11-12T21:26:38+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-access-control-policy-including-the-rules-of-user-behavior-been-communicated-to-your-system-users/ 2015-11-12T21:27:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-how-user-compliance-with-your-access-control-policy-will-be-enforced/ 2015-11-12T21:29:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-who-will-manage-the-access-control-procedures/ 2015-11-12T21:30:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-train-your-users-in-access-control-procedures-and-management/ 2015-11-12T21:32:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-new-employeeuser-access-to-your-data-and-systems/ 2015-11-12T21:36:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-how-a-user-identifier-should-be-established-such-as-length-and-content-and-communicated-this-information-to-your-staff-employees-and-workforce-members/ 2015-11-12T21:37:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/can-your-organization-trace-all-system-activity-viewing-modifying-deleting-and-creating-of-ephi-to-a-specific-user/ 2015-11-12T21:41:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-record-each-time-ephi-is-viewed-modified-deleted-or-created-in-an-audit-tool-to-support-audit-and-other-business-functions/ 2015-11-12T21:42:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-policy-on-when-access-procedures-should-be-activated/ 2015-11-12T21:44:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-policy-name-the-personroleoffice-that-makes-the-decision-to-activate-your-emergency-access-procedures/ 2015-11-12T21:52:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-and-a-method-for-supporting-continuity-of-operations-when-normal-access-procedures-are-disabled-or-unavailable-due-to-system-problems/ 2015-11-12T21:55:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/will-your-organizations-systems-automatically-default-to-settings-and-functionalities-that-will-enable-the-emergency-access-procedures-or-will-it-need-to-be-activated-by-a-systems-administrator/ 2015-11-12T21:58:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-inventoried-your-electronic-tools-for-automatic-logoff-capabilities/ 2015-11-12T21:59:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-data-will-need-to-be-captured-by-your-audit-controls-and-in-your-audit-logs-user-id-event-typedatetime/ 2015-11-12T22:09:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-process-and-communication-plan-to-tell-your-staff-employees-and-workforce-members-about-your-organizations-decisions-re-audit-and-review-of-their-use-of-ephi/ 2015-11-12T22:20:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-a-person-role-or-office-as-the-responsible-party-for-your-overall-audit-process-and-its-results/ 2015-11-12T22:20:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-type-of-audit-trail-data-it-will-need-and-the-monitoring-procedures-to-derive-exception-reports-other-reports/ 2015-11-12T22:21:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-period-how-often-the-audit-results-will-be-analyzed/ 2015-11-12T22:23:57+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-a-list-of-all-your-organization-users-are-authorized-to-access-ephi/ 2015-11-12T22:28:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-an-established-basis-for-assigning-specific-individuals-and-roles-access-to-the-ephi-based-on-need-such-as-necessary-for-job-task/ 2015-11-12T22:29:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-that-are-used-to-decrease-or-eliminate-alteration-of-ephi-during-transition-such-as-encryption/ 2015-11-12T22:32:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-formally-documented-set-of-integrity-requirements-that-is-based-on-your-analysis-of-use-users-and-misuses-of-ephi-and-your-risk-analysis/ 2015-11-12T22:33:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organization-authentication-procedures-include-ongoing-system-applications-network-and-tool-maintenance-and-update-of-your-authentication-methods/ 2015-11-12T22:54:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-authentication-methods-what-are-they/ 2015-11-12T22:57:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-passwords-for-individual-access-to-ephi/ 2015-11-12T22:59:10+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-documented-set-of-requirements-for-transmitting-ephi/ 2015-11-12T23:10:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-an-auditing-process-during-transmission-that-verifies-that-the-ephi-has-been-protected-against-unauthorized-access/ 2015-11-12T23:11:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-measures-planned-or-implemented-to-protect-ephi-during-transmission-2/ 2015-11-12T23:18:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-assurance-that-the-information-is-not-altered-during-transmission-2/ 2015-11-12T23:20:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-encryption-for-ephi-transmission/ 2015-11-12T23:29:10+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-staff-skilled-in-the-use-of-encryption/ 2015-11-12T23:31:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-the-key-business-associate-staffpoint-of-contact-in-the-event-of-a-security-incident/ 2015-11-13T00:22:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-reasonable-and-appropriate-polices-and-procedures-that-comply-with-the-standards-and-implementation-specifications-of-the-hipaa-security-rule/ 2015-11-13T01:09:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-your-decisions-concerning-the-security-management-operational-and-technical-controls-to-mitigate-your-identified-risks/ 2015-11-13T01:13:20+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-contracts-address-functions-related-to-creating-receiving-maintaining-and-transmitting-ephi/ 2015-11-13T16:09:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-business-associate-contracts-provide-that-the-business-associates-conduct-a-risk-assessment-that-addresses-administrative-physical-and-technical-risks/ 2015-11-13T16:10:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-a-procedure-including-a-reporting-mechanism-for-reporting-security-incidents-by-a-business-associate/ 2015-11-13T16:12:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-inventory-include-removable-media-remote-access-devices-and-mobile-devices/ 2015-11-13T16:57:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-assured-compliance-with-all-policies-and-procedures-by-all-your-staff-and-workforce/ 2015-11-13T17:12:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organizations-formally-documented-the-basis-for-restricting-access-to-ephi/ 2015-11-13T17:28:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-incorporated-your-staff-employee-workforce-members-jobs-and-job-descriptions-roles-and-responsibilities-in/ 2015-11-13T19:57:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-the-importance-of-timely-application-of-system-patched-to-protect-against-malicious-software-and-exploitation-of-vulnerabilities/ 2015-11-13T19:59:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-tested-its-contingency-plan-on-a-predefined-cycle/ 2015-11-13T20:11:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/will-your-organizations-new-security-controls-work-with-your-organizations-existing-it-architecture/ 2015-11-14T17:31:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-review-your-information-systems-activity-periodically-how-often-what-are-the-exceptions-to-the-process-that-changes-the-review-period/ 2015-11-14T17:37:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-listing-in-writing-who-has-the-business-need-and-who-has-been-granted-permission-to-view-alter-retrieve-and-store-ephi-and-at-what-times-and-under-what-circumstanc/ 2015-11-14T17:57:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-provided-staff-employees-and-workforce-members-with-a-copy-of-their-job-descriptions-informed-of-the-access-granted-to-them-as-well-as-the-conditions-by-which-this-access-can/ 2015-11-14T17:58:46+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-disseminated-reviewedupdated-and-trained-on-your-risk-assessment-policies-and-procedures/ 2015-11-15T21:04:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-risk-assessment-policy-address-purpose-scope-roles-and-responsibilities-management-commitment-coordination-among-organizational-entities-training-and-compliance/ 2015-11-15T21:05:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-any-prior-risk-assessments-audit-comments-security-requirements-andor-security-test-results/ 2015-11-16T15:44:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-you-organization-researched-the-cost-of-preventive-measures-being-considered/ 2015-11-19T21:44:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-the-current-information-system-configuration-documented-including-connections-to-other-systems-both-inside-and-outside-your-firewall/ 2015-11-19T21:45:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-chains-or-command-and-lines-of-authority-for-workforce-security/ 2015-11-20T02:04:46+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-a-process-for-maintenance-personnel-authorization-and-maintain-a-current-list-of-authorized-maintenance-organizations-and-personnel/ 2015-11-20T02:05:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-standard-checklist-of-action-items-for-completion-when-a-staff-employee-workforce-member-leaves-your-employment-such-a-s-the-return-of-all-access-devices-deactivation/ 2015-11-20T02:06:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-scheduled-and-conducted-the-training-outlined-in-your-training-strategy-and-plan-and-how-often-has-your-organization-done-security-training-since-the-publication-of-the-hipaa-sec/ 2015-11-20T02:18:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-identified-list-of-both-internal-and-external-persons-and-their-contact-information-who-should-be-informed-if-a-security-incident-has-occurred/ 2015-11-20T02:23:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-emergency-coordinator-who-manages-maintains-and-updates-the-contingency-plan-does-your-organizations-staff-employees-and-workforce-members-know-who-this-individual/ 2015-11-20T02:34:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-staff-employees-and-workforce-members-know-who-your-emergency-coordinator-is-and-how-to-contact-him-or-her/ 2015-11-20T02:34:37+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-emergency-call-list-has-it-been-distributed-to-all-staff-employees-and-workforce-members/ 2015-11-20T02:35:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-determination-of-when-your-contingency-plan-needs-to-be-activated-is-it-triggered-by-anticipated-duration-of-outage-loss-of-capability-or-impact-on-service-delivery/ 2015-11-20T02:36:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-finalized-a-set-of-contingency-procedures-that-can-be-invoked-for-all-identical-impacts-including-emergency-mode-of-operation/ 2015-11-20T02:36:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-documented-procedures-related-to-recovery-from-emergency-or-disastrous-events/ 2015-11-20T02:37:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-plans-procedures-and-agreements-initiated-or-in-place-if-the-preventive-measures-need-to-be-implemented/ 2015-11-20T02:38:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-agreements-as-written-and-executed-contain-sufficient-language-to-ensure-that-required-information-types-are-protected-including-the-2009-2010-and-2011/ 2015-11-20T02:44:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-agreements-and-other-arrangements-specify-necessary-security-controls/ 2015-11-20T02:45:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-conduct-periodic-security-reviews-on-your-business-associates-or-covered-entities/ 2015-11-20T02:47:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-included-all-types-of-computing-devices-in-your-inventory-of-workstations-such-as-laptops-pdas-tablets-ipads-smart-phones-and-others/ 2015-11-20T02:52:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-your-organizations-current-audit-logging-and-access-control-techniques-and-methods-sufficient-to-address-the-integrity-of-ephi/ 2015-11-20T02:57:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-how-the-plan-will-be-tested-will-it-be-a-table-top-exercise-or-a-real-operational-scenario/ 2015-11-20T14:47:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-if-the-user-identifier-should-be-self-selected-or-randomly-generated-is-it-different-for-different-types-of-data/ 2015-11-20T14:53:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-implemented-policies-and-procedures-that-address-the-disposal-of-ephi-and-or-the-hardware-and-electronic-media-on-which-it-is-stored-including-the-appropriate-me/ 2015-11-20T15:27:50+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-sanitize-equipment-to-remove-all-information-from-associated-media-prior-to-removal-from-your-organizations-facilities-for-off-site-maintenance/ 2015-11-20T15:27:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-disseminated-your-risk-assessment-policies-and-procedures/ 2015-11-20T15:31:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-identity-methods-corroborate-that-the-person-is-the-one-claimed/ 2015-11-21T21:53:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-disseminated-and-periodically-reviewedupdated-a-formal-documented-a-physical-and-environmental-protection-policy-that-address-the-purposes-scope-roles-responsibi/ 2015-11-23T19:51:37+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-which-security-procedures-must-be-tested-in-more-than-one-system/ 2015-11-23T19:55:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organizations-clearinghouse-staff-employees-and-workforce-been-trained-to-safeguard-ephi-from-disclosure-to-your-larger-organization/ 2015-11-29T04:31:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-a-formal-and-documented-finding-that-one-part-of-your-organization-is-a-healthcare-clearinghouse/ 2015-11-29T04:32:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-healthcare-clearinghouse-developed-and-implemented-policies-and-procedures-that-protect-the-clearinghouse-ephi-form-unauthorized-access-by-the-other-parts-of-your-organization/ 2015-11-29T04:33:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-clearinghouse-share-hardware-or-software-with-your-larger-organization-of-which-it-is-part/ 2015-11-29T04:34:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-clearinghouse-share-staff-or-physical-space-with-staff-from-a-larger-organization/ 2015-11-29T04:34:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-a-separate-network-or-subsystem-for-your-organizations-clearinghouse/ 2015-11-29T04:35:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organization-and-the-organization-you-are-contract-with-are-both-governmental-agencies-do-you-use-a-memorandum-of-understanding-mou/ 2015-11-29T14:50:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-mouagreement-provide-protection-for-the-ephi-equivalent-to-those-provided-in-at-hipaa-business-associate-contract/ 2015-11-29T14:51:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organizations-mou-cannot-be-terminated-are-other-enforcement-mechanisms-in-place-that-are-reasonable-and-appropriate/ 2015-11-29T14:51:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organization-has-an-mou-have-you-made-a-good-faith-effort-to-obtain-satisfactory-assurances-that-the-hipaa-security-standards-are-met-2/ 2015-11-29T14:52:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-make-the-attempt-to-obtain-satisfactory-assurances-and-the-reasons-that-those-assurances-cannot-be-obtained-documented/ 2015-11-29T14:52:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-know-all-the-laws-and-regulations-governing-the-use-of-ephi-by-the-governmental-business-associate/ 2016-01-05T21:49:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-inventory-of-what-business-process-would-be-impacted-and-for-how-long-if-data-were-unavailable-while-media-was-being-moved/ 2016-01-05T21:50:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-staff-to-maintain-a-process-for-encrypting-ephi-during-transmission/ 2016-01-05T21:51:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-any-of-your-organizations-facilities-located-in-a-region-prone-to-any-natural-disasters-such-as-earthquakes-floods-or-fires-others/ 2016-01-11T20:17:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-need-and-have-separate-termination-procedures-for-voluntary-termination-including-retirement-promotion-transfer-or-change-of-employment-internal-to-your-organization-versu/ 2016-01-11T20:26:17+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-interview-key-staff-when-assessing-your-security-training-needs/ 2016-01-11T20:45:46+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/did-your-organizations-assessment-include-the-security-training-needs-of-sensitive-data-and-other-similar-information/ 2016-01-11T20:46:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-outlined-content-and-audience-training-priorities/ 2016-01-11T20:47:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/have-you-conducted-a-training-program-assessment/ 2016-01-11T20:53:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/when-conducting-the-training-assessment-did-your-organization-discover-any-gaps-what-were-they-did-you-outline-what-needs-to-be-added-and-updated/ 2016-01-11T20:58:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-that-you-do-not-need-a-standing-incident-response-team-if-so-what-other-response-mechanism-are-you-using/ 2016-01-11T21:18:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-included-staff-employees-or-workforce-members-with-it-knowledge-in-your-security-evaluation-team-and-used-during-your-evaluation/ 2016-01-11T21:28:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-agreements-and-other-arrangements-include-security-requirements-that-address-confidentiality-integrity-and-availability-of-ephi/ 2016-01-11T21:38:52+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-what-awareness-training-and-education-programs-are-needed-and-which-programs-will-be-required/ 2016-01-13T19:34:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-the-known-security-gaps-after-your-security-evaluation-between-the-known-risks-and-your-mitigating-security-controls-and-any-acceptance-of-risk-including-your-organi/ 2016-01-18T20:52:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-new-hire-security-awareness-technology-and-information-systems-training-plan/ 2016-01-18T20:55:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-defined-the-frequency-of-your-risk-assessment-policy-and-procedures-reviews-and-updates/ 2016-01-19T18:42:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-and-updated-your-risk-assessment-policy-and-procedures-in-accordance-with-your-defined-frequency/ 2016-01-19T18:43:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-a-training-schedule-for-your-risk-management-program/ 2016-01-20T20:43:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-isolating-clearinghouse-functions-implementation-specifications-2/ 2016-01-20T21:39:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-grant-your-staff-employees-and-workforce-members-remote-access-to-ephi/ 2016-01-20T21:48:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-if-direct-access-to-ephi-will-be-granted-to-third-parties-external-to-your-organization-including-business-partners-other-providers-health-plans-patients-and-membe/ 2016-01-20T22:12:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-security-access-controls-policies-and-procedures-are-they-updated-regularly/ 2016-01-20T22:14:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-provide-formal-written-and-documented-authorization-from-the-appropriate-manager-before-granting-access-to-sensitive-information/ 2016-01-21T17:06:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-training-strategy-and-plan-include-a-consideration-of-compliance-dates-and-the-hitech-act-updates/ 2016-01-21T17:07:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-train-your-non-employees-such-as-contractors-interns-volunteers-and-others/ 2016-01-21T17:09:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-different-types-of-media-and-venues-for-your-security-awareness-training-what-types-and-how-many-different-types-of-media-and-venues-does-your-organization-use-for-security/ 2016-01-21T17:35:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/during-the-emergency-would-different-staffemployees-facilities-or-systems-be-needed-to-perform-these-critical-functions-during-the-emergency/ 2016-01-21T17:35:50+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-include-external-entities-including-vendors-alternative-site-and-service-providers-in-your-testing-exercises/ 2016-01-21T17:40:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-agreements-and-other-arrangements-include-security-requirements-meet-all-the-hipaa-security-rule-requirements-per-the-hitech-act/ 2016-01-21T17:58:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-and-assigned-responsibility-for-the-measures-and-activities-necessary-to-correct-deficiencies-and-ensure-that-proper-access-is-allowed/ 2016-01-21T18:18:21+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-another-workforce-member-other-than-the-security-officer-responsible-for-your-organizations-facility-and-physical-security/ 2016-01-21T18:19:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-lap-tops-and-tablets-ipads-as-workstations-do-you-have-specific-policies-and-procedures-for-such-workstations/ 2016-01-25T18:39:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-any-of-your-organizations-systems-networks-or-data-accessed-remotely/ 2016-01-25T18:50:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/what-activities-will-your-audit-controls-monitor-creation-review-updating-deleting-other-of-ephi/ 2016-01-25T20:33:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/if-your-organizations-current-techniques-and-methods-are-not-sufficient-are-there-additional-techniques-and-methods-that-you-can-apply-to-check-ephi-integrity-such-as-quality-control-process-tr/ 2016-01-25T20:41:46+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-both-electronic-and-non-electronic-mechanisms-to-protect-ephi/ 2016-01-25T20:44:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-trained-staff-to-maintain-the-system-or-is-this-work-outsourced/ 2016-01-25T21:29:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-formal-documented-policies-and-procedures-for-transmission-of-ephi-and-have-they-been-communicated-to-your-staff-employees-and-workforce-members/ 2016-01-25T21:30:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-integrity-controls-policies-and-procedures-2/ 2016-01-25T21:39:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-there-any-encryption-algorithms-and-mechanisms-available-to-your-organization-what-are-they-if-there-are-any/ 2016-01-25T21:41:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-evaluated-your-existing-systems-capabilities-in-the-last-12-months-and-determined-if-any-changes-of-upgrades-are-necessary/ 2016-01-25T22:23:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-automated-tools-to-collect-data-and-otherwise-support-your-organizations-evaluation-process/ 2016-01-26T19:34:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-named-in-your-contingency-plan-who-is-responsible-for-access-to-ephi-during-a-disaster-who-is-that-individual/ 2016-01-26T20:20:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-a-workforce-member-of-your-organization-other-than-the-security-official-responsible-for-the-facility-plan/ 2016-01-26T20:26:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-written-policy-related-to-your-integrity-requirements-and-has-it-been-communicated-to-your-systems-users/ 2016-01-26T21:30:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-documentation-policy-and-procedures/ 2016-01-27T22:33:43+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-aligned-hipaa-documentation-retention-requirements-with-all-other-data-retention-policies/ 2016-01-27T22:34:53+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizational-testing-lend-itself-to-phased-testing-based-on-the-assessment-of-business-impact-and-acceptability-of-sustained-loss-of-service/ 2016-01-27T23:22:20+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-authentication-mechanisms-such-as-error-correcting-memory-magnetic-disc-storage-digital-signatures-check-sum-technology-others/ 2016-01-28T18:55:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-all-processes-involving-ephi-including-creating-receiving-maintaining-and-transmitting-it/ 2016-01-29T17:06:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-in-place-for-security/ 2016-01-29T17:33:52+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-a-formal-and-documented-process-plus-policy-and-procedures-that-address-system-misuse-abuse-and-any-fraudulent-activities-with-your-organizations-ephi/ 2016-01-29T17:37:52+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-formal-documented-systems-activity-process-and-procedures/ 2016-01-29T17:38:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-complete-security-official-job-description-that-accurately-reflects-the-security-duties-and-responsibilities-does-it-include-all-areas-outlined-and-spoken-of-in-the-que/ 2016-01-29T17:39:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-policies-and-procedures-to-ensure-that-any-and-all-staff-employees-and-workforce-members-have-appropriate-and-only-appropriate-access-to-ephi-and-to-prevent-the/ 2016-01-29T17:40:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-workforce-security-implementation-specifications/ 2016-01-29T17:40:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-procedures-for-authorization-andor-supervision-of-work-force-members-who-work-with-ephi-or-in-locations-where-it-might-be-accessed/ 2016-01-29T17:41:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-do-background-checks-such-as-a-criminal-offender-record-information-cori-check-if-appropriate-in-the-circumstances/ 2016-01-29T17:42:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-standards-set-of-procedures-to-recover-access-control-devices-including-identification-badges-keys-access-cards-from-staff-employees-and-workforce-member-where-their-e/ 2016-01-29T17:43:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-policies-and-procedures-that-authorized-your-staff-employees-and-workforce-to-access-to-ephi-to-provide-protection-for-the-use-and-disclosure-of-the-ephi/ 2016-01-29T17:44:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-component-that-functions-as-a-healthcare-clearinghouse/ 2016-01-29T17:45:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-formally-documented-how-access-to-ephi-will-be-granted-to-your-staff-employees-and-workforce-members/ 2016-01-29T17:46:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-formally-documented-the-standards-you-use-to-grant-a-staff-employee-workforce-member-users-access-to-a-workstation-lap-top-transaction-program-process-and-other-tools-an/ 2016-01-29T17:47:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-formally-determined-and-documented-your-security-trailing-needs/ 2016-01-29T17:47:45+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-security-reminder-implementation-specifications/ 2016-01-29T17:48:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-provide-periodic-security-updates-to-your-staff-employees-workforce-business-associates-and-contractorsvendors/ 2016-01-29T17:49:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-trained-your-staff-employees-and-workforce-members-in-procedures-for/ 2016-01-29T17:49:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-policies-and-procedures-for-any-security-incidents/ 2016-01-29T17:51:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-documented-incident-response-procedures-that-can-provide-your-organization-with-a-single-point-of-reference-to-guide-the-day-to-day-operations-of-the-incident-response-team/ 2016-01-29T17:51:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-defined-your-overall-contingency-objectives-does-it-include-a-listing-of-all-areas-that-use-ephi/ 2016-01-29T17:52:38+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-reviewed-the-data-backup-plan-and-disaster-recovery-plan-implementation-specifications/ 2016-01-29T17:53:36+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-contingency-plan-address-disaster-recovery-and-back-up/ 2016-01-29T17:54:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-and-implemented-when-needed-procedures-to-enable-continuation-of-critical-business-processes-for-the-security-of-ephi-while-your-organization-is-operating-in-emerge/ 2016-01-29T17:55:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-established-and-implemented-as-needed-periodic-testing-procedures-and-for-the-revision-of-your-organizations-contingency-plan/ 2016-01-29T17:55:58+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-identified-the-critical-services-or-operations-and-the-manual-and-automated-processes-that-support-them-involving-ephi/ 2016-01-29T17:56:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-any-existing-reports-or-documentation-that-you-had-previously-prepared-or-created-by-your-organization-addressing-compliance-integration-or-maturity-of-a-particular-or-ma/ 2016-01-29T17:57:24+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-business-associate-contracts/ 2016-01-29T17:58:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-facility-access-controls-policies-and-procedures/ 2016-01-29T17:59:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-contingency-operations-plan-2/ 2016-01-29T18:00:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-implemented-measures-to-provide-physical-protection-for-the-ephi-in-your-possession/ 2016-01-29T18:00:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-in-place-for-controlling-and-validating-access-to-your-facilities-by-staff-employees-workforce-members-visitors-and-probationary-employees/ 2016-01-29T18:01:30+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-developed-and-implemented-polices-and-procedures-to-document-repairs-and-modification-to-the-physical-components-of-your-facilities-specifically-related-to-security/ 2016-01-29T18:02:26+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-workstation-use-policies-and-procedures/ 2016-01-29T18:03:07+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-workstation-security-physical-safeguards-in-place/ 2016-01-29T18:03:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-device-and-media-controls-policies-and-procedures/ 2016-01-29T18:04:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-disposal-policies-and-procedures-2/ 2016-01-29T18:05:02+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-the-removal-of-ephi-from-electronic-media-before-the-media-are-made-available-for-reuse-including-assuring-that-ephi-is-properly-destroyed-and-cannot-be-rec/ 2016-01-29T18:05:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-keep-a-record-of-the-movement-of-hardware-and-software-both-inside-your-organization-and-when-it-leave-your-facility-and-do-you-have-an-individual-or-office-responsible-for-thi/ 2016-01-29T18:06:29+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-create-an-exact-copy-of-ephi-if-needed-before-you-move-the-equipment/ 2016-01-29T18:07:04+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-access-to-technical-policies-and-procedures/ 2016-01-29T18:07:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-formal-access-control-policy-that-guided-the-development-of-access-control-procedures/ 2016-01-29T18:08:41+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-procedures-for-obtaining-necessary-access-to-ephi-during-an-emergency/ 2016-01-29T18:09:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-electronic-procedure-that-automatically-terminates-electronic-session-after-a-predetermined-time-of-activity/ 2016-01-29T18:10:05+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-determined-the-appropriate-scope-of-audit-controls-that-are-be-necessary-to-protect-your-information-systems-and-tools-that-contain-ephi-based-on-your-risk-assessment/ 2016-01-29T18:10:51+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-integrity-policies-and-procedures/ 2016-01-29T18:11:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-in-place-electronic-mechanisms-to-corroborate-that-ephi-has-not-been-altered-or-destroyed-in-an-unauthorized-manner/ 2016-01-29T18:12:14+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-person-and-entity-authentication-polices-and-procedures/ 2016-01-29T18:12:54+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-transportation-policies-and-procedures/ 2016-01-29T18:13:23+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-processmechanism-to-encrypt-and-decrypt-ephi-2/ 2016-01-29T18:14:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-business-associate-agreements-includes-specified-paragraphs-on-disclosures-of-business-associates/ 2016-01-29T18:18:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-agreements-includes-specified-paragraphs-on-termination-of-business-associates/ 2016-01-29T18:19:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-agreements-includes-specified-paragraphs-if-termination-of-business-associates-is-not-feasible-the-issues-is-reported-to-the-office-for-civil-rights/ 2016-01-29T18:20:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-contracts-provide-the-business-associates-that-will-implement-administrative-physical-and-technical-safeguards-to-protect-the-ephi/ 2016-01-29T18:21:25+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-business-associate-contracts-provide-that-any-agent-including-a-subcontractor-to-whom-the-business-associate-provides-ephi-or-access-to-such-ephi-agrees-to-implement-reason/ 2016-01-29T18:22:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-contracts-provide-that-the-business-associate-will-report-any-security-incidents-of-which-it-becomes-aware-to-the-covered-entity/ 2016-01-29T18:22:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-contract-include-standards-and-thresholds-for-termination-of-contract/ 2016-01-29T18:24:15+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-memorandums-of-understanding-mou-with-certain-business-associates/ 2016-01-29T18:24:55+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-other-laws-similar-to-business-associate-agreement-requirements-that-it-must-implement/ 2016-01-29T18:25:42+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-or-your-contact-partners-have-statutory-obligations-which-requires-the-removal-of-the-termination-requirement/ 2016-01-29T18:26:22+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-change-security-policies-and-procedures-at-any-appropriate-time-and-document-the-changes-and-implementation/ 2016-01-29T18:34:19+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-individual-or-office-that-maintains-and-is-responsible-for-your-hipaa-security-documentation/ 2016-01-29T18:36:03+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization1-document-allowed-methods-or-remote-access-to-the-information-system/ 2016-01-29T18:53:28+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-data-retention-policy-and-procedures-that-consider-all-hipaa-retention-requirements/ 2016-01-29T19:11:01+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-communicated-with-all-staff-that-need-access-to-your-security-documentation-where-it-is-found/ 2016-01-29T19:11:49+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-version-control-for-your-procedures-and-process-for-the-verification-of-the-timeliness-of-your-security-policies-and-procedures/ 2016-01-29T19:13:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-policies-and-procedures-for-administrative-safeguards-physical-safeguards-and-technical-safeguards/ 2016-01-29T23:28:59+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-business-associate-agreements-or-other-contracts-with-other-health-care-entities/ 2016-02-25T21:20:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-business-associate-agreements-include-mandated-requirements/ 2016-02-25T21:32:44+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-use-mechanisms-and-measures-to-assess-the-effectiveness-of-your-review-process-what-mechanisms-and-measures-do-you-use/ 2016-02-29T21:13:32+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-tools-in-place-for-auditing-data-review-creating-deleting-and-updating-plus-for-firewall-system-activity-and-other-similar-activities/ 2016-02-29T21:15:40+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-review-and-update-your-policies-procedures-and-standards-as-needed-and-when-appropriate/ 2016-02-29T21:17:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-any-business-associates/ 2016-04-30T20:00:18+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/is-your-organization-a-group-health-plan/ 2016-05-01T17:54:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-only-share-summary-health-information-or-disclose-whether-an-individual-is-a-participant-or-enrolledunenrolled-to-the-health-plan-sponsor/ 2016-05-01T17:57:52+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-group-health-plan-documents-that-include-plan-sponsor-requirements/ 2016-05-01T17:58:27+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-amend-your-plan-documents-to-incorporate-provisions-that-require-a-health-plan-sponsor-to-implement-administrative-physical-and-technical-safeguards-to-protect-the-ephi-also/ 2016-05-01T17:59:00+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organizations-plan-document-and-ensure-adequate-separation-between-the-group-health-plan-and-the-plan-sponsor-including-sponsors-employees-classes-of-employees-or-other-persons-who-will/ 2016-05-01T17:59:34+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-plan-documents-include-provisions-to-require-plan-sponsors-agents-including-subcontractors-to-whom-it-provides-ephi-agrees-to-implement-all-reasonable-and-appropriate-securi/ 2016-05-01T18:00:12+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/do-your-organizations-plan-documents-include-provisions-to-require-plan-sponsor-to-report-to-the-group-health-plan-ay-security-incident-of-which-it-becomes-aware/ 2016-05-01T18:06:28+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-procedure-in-place-that-includes-a-mechanism-for-reporting-security-incidents-by-a-plan-sponsor/ 2016-05-01T18:07:11+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-a-procedure-in-place-that-includes-a-reporting-mechanism-for-responding-to-security-incidents-by-a-plan-sponsor/ 2016-05-01T18:07:48+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-3-monitor-for-unauthorized-remote-access-to-the-information-system/ 2016-05-01T19:39:35+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-4-authorize-remote-access-to-the-information-system-prior-to-the-connection/ 2016-05-01T19:40:16+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-1-establish-usage-restrictions-and-implementation-guidance-for-organization-controlled-mobile-devices/ 2016-05-01T19:40:56+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-6-issue-specifically-configured-mobile-devices-to-individuals-traveling-to-locations-that-your-organization-deems-to-be-of-significant-risk-in-accordance-with-organizational-p/ 2016-05-01T19:42:09+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-3-monitor-for-unauthorized-connections-of-mobile-devices-to-your-organizations-information-system/ 2016-05-02T02:24:08+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-business-associates/ 2016-05-09T13:21:31+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/does-your-organization-have-an-inventory-of-what-systems-applications-processes-servers-laptops-pdas-tablets-ipads-and-other-electronic-tools-make-data-vulnerable-to-unauthorized-or-inappropri/ 2016-10-11T14:13:39+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-conducted-penetration-testing-before-the-penetration-testing-did-your-organization-have-management-approval-for-such-testing/ 2016-10-11T14:24:47+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/are-all-the-hardware-and-software-for-which-your-organization-is-responsible-periodically-inventoried-including-excel-spreadsheets-word-tables-and-other-like-data-storage/ 2016-10-19T17:53:13+00:00 https://staging-mnhipaa.kinsta.cloud/assessment-question/has-your-organization-made-all-your-staff-employees-and-workforce-aware-of-your-processes-policy-and-procedures-concerning-sanctions-for-inappropriate-access-use-disclosure-and-transmission-of/ 2016-10-19T17:58:36+00:00