- Six required annual audits and assessments (Security Risk, Privacy, Asset & Device, etc.)
- Space to document deficiencies and gaps
- Prompts for remediation plans and reminders to review annually
- Workforce training tracking (proof of training, designated HIPAA officer)
- Policy & Procedure review points (attestations, version control, annual review)
- Vendor and Business Associate Agreement checklist
- Incident and breach response steps (reporting, investigations, anonymous reporting)
- Reminders for six-year documentation retention