Free HIPAA reference template · v1.0 · Applies to covered entities & business associates
Free, no signup needed. A ready-to-fill spreadsheet (.xlsx) with dropdowns and examples.
Adopting this document means committing to these HIPAA controls, the 45 CFR §164 requirements it helps satisfy, by area:
Common threats (NIST SP 800-30 classes) that the controls behind this document defend against:
Exploits: Unpatched systems; no tested backups · 164.308(a)(7) Contingency; 164.308(a)(5)(ii)(B) Malware
Exploits: No line of succession; key-person risk · 164.308(a)(7) Contingency Plan
Exploits: No DR plan; no RTO · 164.308(a)(7)(ii)(B) Disaster Recovery
Template (spreadsheet). Proof that you actually tested your backups and recovery, not just wrote a plan. Record each test/exercise, what worked, what didn't, and the follow-ups.
The evidence that your contingency plans are exercised, not shelf-ware: each test, its result, and the gaps you found and fixed.
One row per test or exercise:
Test your backups and recovery on a schedule and log each run here (a restore drill at minimum). Capture what failed and the follow-up owner, then track it to done. Satisfies testing & revision at 45 CFR § 164.308(a)(7)(ii)(D) and supports the Disaster Recovery Plan at § 164.308(a)(7)(ii)(B).
See where your organization stands on the controls this template cites.
Join Us