Section § 164.308(a)(8)Evaluation

What it says

(8) Standard: Evaluation. Perform a periodic technical and nontechnical evaluation, based initially upon the standards implemented under this rule and, subsequently, in response to environmental or operational changes affecting the security of electronic protected health information, that establishes the extent to which a covered entity's or business associate's security policies and procedures meet the requirements of this subpart.

HIPAA, the United States rules protecting health information, § 164.308(a)(8)

What is in the packs for this

From HIPAA Security Rule Readiness. Each one helps with this requirement.

• XLSExcel

  Security Rule Safeguard Register

  Its Framework References cite this section. Lists the 22 Security Rule standards and their 41 implementation specifications in plain words, required or addressable, with an owner and the evidence to keep.
• XLSExcel

  HIPAA Documentation & Evidence Checklist

  Its Framework References cite this section. Lists the documents and records to keep ready, the paragraph of the Rule behind each, and how long each must be kept.
• XLSExcel

  HIPAA Security Rule Readiness Self-Assessment

  Its Framework References cite this section. Rates readiness against the Security Rule items and returns the blocking gaps, in counts and with no score.