https://staging-mnhipaa.kinsta.cloud/questionnaire/ 2016-02-25T21:20:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/163-310a2i-contingency-operations-addressable-establish-and-implement-as-needed-procedures-that-allow-facility-access-in-support-of-restoration-of-lost-data-under-the-disaster-recovery-plan/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310a2ii-facility-security-plan-addressable-implement-policies-and-procedures-to-safeguard-the-facility-and-the-equipment-therein-from-unauthorized-physical-access-tampering-and-theft/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/163-310a2iii-access-control-and-validation-procedures-addressable-implement-procedures-to-control-and-validate-a-persons-access-to-facilities-based-on-their-role-or-function-including-visit/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/163-310a2iv-maintenance-records-addressable-implement-policies-and-procedures-to-document-repairs-and-modifications-to-the-physical-components-of-a-facility-which-are-related-to-security-for/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310b-standard-workstation-use-implement-policies-and-procedures-that-specify-the-proper-functions-to-be-performed-the-manner-in-which-those-functions-are-to-be-performed-and-the-physical-att/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310c-standard-workstation-security-implement-physical-safeguards-for-all-workstations-that-access-electronic-protected-health-information-to-restrict-access-to-authorized-users/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310d1-standard-device-and-media-controls-implement-policies-and-procedures-that-govern-the-receipt-and-removal-of-hardware-and-electronic-media-that-contain-electronic-protected-health-infor/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310d2i-disposal-required-implement-policies-and-procedures-to-address-the-final-disposition-of-electronic-protected-health-information-andor-the-hardware-or-electronic-media-on-which-it/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310d2ii-media-re-use-required-implement-procedures-for-removal-of-electronic-protected-health-information-from-electronic-media-before-the-media-are-made-available-for-re-use/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310d2iii-accountability-addressable-maintain-a-record-of-the-movements-of-hardware-and-electronic-media-and-any-person-responsible-therefore/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310d2iv-data-backup-and-storage-addressable-create-a-retrievable-exact-copy-of-electronic-protected-health-information-when-needed-before-movement-of-equipment/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312a1-standard-access-control-implement-technical-policies-and-procedures-for-electronic-information-systems-that-maintain-electronic-protected-health-information-to-allow-access-only-to-tho/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312a2i-unique-user-identification-required-assign-a-unique-name-andor-number-for-identifying-and-tracking-user-identity/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312a2ii-emergency-access-procedure-required-establish-and-implement-as-needed-procedures-for-obtaining-necessary-electronic-protected-health-information-during-an-emergency/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312a2iii-automatic-logoff-addressable-implement-electronic-procedures-that-terminate-an-electronic-session-after-a-predetermined-time-of-inactivity/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312b-standard-audit-controls-implement-hardware-software-andor-procedural-mechanisms-that-record-and-examine-activity-in-information-systems-that-contain-or-use-electronic-protected-health/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312c1-standard-integrity-implement-policies-and-procedures-to-protect-electronic-protected-health-information-from-improper-alteration-or-destruction/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312c2-implementation-specification-mechanism-to-authenticate-electronic-protected-health-information-addressable-implement-electronic-mechanisms-to-corroborate-that-electronic-protected-he/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312d-standard-person-or-entity-authentication-implement-procedures-to-verify-that-a-person-or-entity-seeking-access-to-electronic-protected-health-information-is-the-one-claimed/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312e1-standard-transmission-security-implement-technical-security-measures-to-guard-against-unauthorized-access-to-electronic-protected-health-information-that-is-being-transmitted-over-an-e/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-312e2ii-encryption-addressable-implement-a-mechanism-to-encrypt-electronic-protected-health-information-whenever-deemed-appropriate/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a1i-the-contract-or-other-arrangement-between-the-covered-entity-and-its-business-associate-required-by-164-308b-must-meet-the-requirements-of-paragraph-a2i-or-a2ii-of-this/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a1ii-a-covered-entity-is-not-in-compliance-with-the-standards-in-164-502e-and-paragraph-a-of-this-section-if-the-covered-entity-knew-of-a-pattern-of-an-activity-or-practice-of-the-bus/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a1iia-terminated-the-contract-or-arrangement-if-feasible-or/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a1iib-if-termination-is-not-feasible-reported-the-problem-to-the-secretary/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2ia-implement-administrative-physical-and-technical-safeguards-that-reasonably-and-appropriately-protect-the-confidentiality-integrity-and-availability-of-the-electronic-protected/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2ib-ensure-that-any-agent-including-a-subcontractor-to-whom-it-provides-such-information-agrees-to-implement-reasonable-and-appropriate-safeguards-to-protect-it/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2ic-report-to-the-covered-entity-any-security-incident-of-which-it-becomes-aware/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2id-authorize-termination-of-the-contract-by-the-covered-entity-if-the-covered-entity-determines-that-the-business-associate-has-violated-a-material-term-of-the-contract/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2ii2-other-law-including-regulations-adopted-by-the-covered-entity-or-its-business-associate-contains-requirements-applicable-to-the-business-associate-that-accomplish-the-objective/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2iic-the-covered-entity-may-omit-from-its-other-arrangements-authorization-of-the-termination-of-the-contract-by-the-covered-entity-as-required-by-paragraph-a2id-of-this-sect/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314b1-standard-requirements-for-group-health-plans-except-when-the-only-electronic-protected-health-information-disclosed-to-a-plan-sponsor-is-disclosed-pursuant-to-164-504f1ii-or-iii/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-316a-standard-policies-and-procedures-implement-reasonable-and-appropriate-policies-and-procedures-to-comply-with-the-standards-implementation-specifications-or-other-requirements-of-this-su/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-316b1-standard-documentation/ 2015-10-05T21:27:07+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a1i-standard-security-management-process-implement-policies-and-procedures-to-prevent-detect-contain-and-correct-security-violations/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a1ii-implementation-specifications/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a1iib-risk-management-required-implement-security-measures-sufficient-to-reduce-risks-and-vulnerabilities-to-a-reasonable-and-appropriate-level-to-comply-with-164-306a/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a1iic-sanction-policy-required-apply-appropriate-sanctions-against-workforce-members-who-fail-to-comply-with-the-security-policies-and-procedures-of-the-covered-entity/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a1iid-information-system-activity-review-required-implement-procedures-to-regularly-review-records-of-information-system-activity-such-as-audit-logs-access-reports-and-security-in/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a2-standard-assigned-security-responsibility-identify-the-security-official-who-is-responsible-for-the-development-and-implementation-of-the-policies-and-procedures-required-by-this-subpa/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a3i-standard-workforce-security-implement-policies-and-procedures-to-ensure-that-all-members-of-its-workforce-have-appropriate-access-to-electronic-protected-health-information-as-prov/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a3ii-implementation-specifications/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a3a-authorization-andor-supervision-addressable-implement-procedures-for-the-authorization-andor-supervision-of-workforce-members-who-work-with-electronic-protected-health-informatio/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a3b-workforce-clearance-procedure-addressable-implement-procedures-to-determine-that-the-access-of-a-workforce-member-to-electronic-protected-health-information-is-appropriate/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a3c-termination-procedures-addressable-implement-procedures-for-terminating-access-to-electronic-protected-health-information-when-the-employment-of-a-workforce-member-ends-or-as-requi/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a4i-standard-information-access-management-implement-policies-and-procedures-for-authorizing-access-to-electronic-protected-health-information-that-are-consistent-with-the-applicable-re/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a4iia-isolating-health-care-clearinghouse-functions-required-if-a-health-care-clearinghouse-is-part-of-a-larger-organization-the-clearinghouse-must-implement-policies-and-procedures/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a4iib-access-authorization-addressable-implement-policies-and-procedures-for-granting-access-to-electronic-protected-health-information-for-example-through-access-to-a-workstation/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a4iic-access-establishment-and-modification-addressable-implement-policies-and-procedures-that-based-upon-the-entitys-access-authorization-policies-establish-document-review-an/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a5i-standard-security-awareness-and-training-implement-a-security-awareness-and-training-program-for-all-members-of-its-workforce-including-management/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a5ii-implementation-specifications/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a5iia-security-reminders-addressable-periodic-security-updates/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a5iib-protection-from-malicious-software-addressable-procedures-for-guarding-against-detecting-and-reporting-malicious-software/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a6i-standard-security-incident-procedures-implement-policies-and-procedures-to-address-security-incidents/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a6ii-implementation-specification-response-and-reporting-required-identify-and-respond-to-suspected-or-known-security-incidents-mitigate-to-the-extent-practicable-harmful-effects-o/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7i-standard-contingency-plan-establish-and-implement-as-needed-policies-and-procedures-for-responding-to-an-emergency-or-other-occurrence-for-example-fire-vandalism-system-failur/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7ii-implementation-specifications/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7iia-data-backup-plan-required-establish-and-implement-procedures-to-create-and-maintain-retrievable-exact-copies-of-electronic-protected-health-information/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7iic-emergency-mode-operation-plan-required-establish-and-implement-as-needed-procedures-to-enable-continuation-of-critical-business-processes-for-protection-of-the-security-of-el/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7iid-testing-and-revision-procedures-addressable-implement-procedures-for-periodic-testing-and-revision-of-contingency-plans/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a7iie-applications-and-data-criticality-analysis-addressable-assess-the-relative-criticality-of-specific-applications-and-data-in-support-of-other-contingency-plan-components/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308a8-standard-evaluation-perform-a-periodic-technical-and-nontechnical-evaluation-based-initially-upon-the-standards-implemented-under-this-rule-and-subsequently-in-response-to-environmen/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-308b1-standard-business-associate-contracts-and-other-arrangements-a-covered-entity-in-accordance-with164-306-may-permit-a-business-associate-to-create-receive-maintain-or-transmit-elec/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-310a1-standard-facility-access-controls-implement-policies-and-procedures-to-limit-physical-access-to-its-electronic-information-systems-and-the-facility-or-facilities-in-which-they-are-hous/ 2015-10-05T21:27:08+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-316b2ii-availability-required-make-documentation-available-to-those-persons-responsible-for-implementing-the-procedures-to-which-the-documentation-pertains/ 2015-10-26T19:34:18+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-316b2iii-updates-required-review-documentation-periodically-and-update-as-needed-in-response-to-environmental-or-operational-changes-affecting-the-security-of-the-electronic-protected-h/ 2015-10-26T19:34:37+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a2ii-other-arrangements-a-when-a-covered-entity-and-its-business-associate-are-both-governmental-entities-the-covered-entity-is-in-compliance-with-paragraph-a1-of-this-section/ 2015-11-13T00:38:21+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-316b2-implementation-specifications/ 2015-11-13T15:55:32+00:00 https://staging-mnhipaa.kinsta.cloud/questionnaire/164-314a1-standard-business-associate-contracts-or-other-arrangements/ 2016-02-25T21:20:08+00:00