Risk Assessment, Policies and Procedures

1. Applications-and-Data-Criticality-Analysis
2. Breach-Training-for-Employees
3. Configuration-Change-Policy
4. Contingency-Plan
5. Data-Backup-Policy
6. Emergency-Plan-Testing-Policy-and-Procedure
7. Evaluation-Policy
8. Facility-Access-Controls-Policy
9. Information-System-Activity-Review-Policy
10. Integrity-Controls-Policy
11. Internet-and-Email-Use-Policy
12. IT-System-Maintenance-Policy
13. Media-Sanitization-and-Disposal-Policy
14. Mobile-Devices-Policy
15. Paper-Sanitization-Policy
16. Password-Policy
17. Patch-Management-Policy
18. Person-or-Entity-Authentication
19. Protection-from-Malicious-Software-Policy
20. Remote-Access-Policy
21. Risk-Management-Policy
22. Security-Awareness-Training-Policy
23. Security-Incident-Response-Plan
24. Security-Program-for-Security-Officer
25. Technical-Safeguards-Access-Control-Policy
26. Termination-Policy
27. Transmission-Security-Policy
28. Uses-and-Disclosures-of-PHI
29. Violation-Sanction-Policy
30. Wireless-Security-Policy
31. Workstation-Security-Policy