HIPAA Security Implementation, Version 1.0

11.2 HIPAA SECURITY-ADMINISTRATIVE SAFEGUARDS

As the chart from chapter 3 shows, the HIPAA Security Administrative Safeguards have 9 individual Standards, with a total of 21 Implementation Specifications. There are 12 required and 11 addressable Implementation Specifications, and 2 Standards with no Implementation Specifications given, but each of which are required. Here are the 9 Standards for Administrative Safeguards:

• Security Management Process

• Assigned Security Responsibility

• Workforce Security

• Information Access Management

• Security Awareness Training

• Security Incident Procedures

• Contingency Plan

• Evaluation

• Business Associate Contracts and other arrangements

Many of the Implementation Standards will be specific to each covered entity, and that is why some of the Standards have been made 'addressable'.

Some of the following standards are straightforward, but some may involve a great deal of detailed work, review, training, and money to comply with.