Free HIPAA reference template · v1.0 · Applies to covered entities & business associates
Free, no signup needed. A ready-to-fill spreadsheet (.xlsx) with dropdowns and examples.
Adopting this document means committing to these HIPAA controls, the 45 CFR §164 requirements it helps satisfy, by area:
Template (spreadsheet). A fillable register for tracking risks from your Risk Analysis through to remediation, one row per risk. An auditor reads this to see that risk management is active, not one-and-done.
The living record of the risks you identified and what you're doing about each one: the evidence behind HIPAA's risk-management requirement, kept current rather than filed once and forgotten.
One row per risk, with columns for:
Open a row for every risk from your Risk Analysis. Score Likelihood and Impact, set the combined Risk level, assign an Owner and Target date, and move Status forward as you remediate. Review the whole register at least quarterly. Satisfies the risk-management requirement at 45 CFR § 164.308(a)(1)(ii)(B).
See where your organization stands on the controls this template cites.
Join Us