Free HIPAA reference template · v1.0 · Applies to covered entities & business associates
Free, no signup needed. A ready-to-fill spreadsheet (.xlsx) with dropdowns and examples.
Adopting this document means committing to these HIPAA controls, the 45 CFR §164 requirements it helps satisfy, by area:
Common threats (NIST SP 800-30 classes) that the controls behind this document defend against:
Exploits: No or weak MFA; reused passwords · 164.312(d) Authentication; 164.308(a)(5) Training
Template (spreadsheet). Proof that your workforce was trained, the artifact an assessor asks for per person. Record every member's security-awareness and HIPAA training, when it was completed, and how it's evidenced.
The per-person roster that shows your whole workforce completed security-awareness and HIPAA training: the evidence behind the training requirement, kept current as people join.
One row per workforce member:
Add a row per person and training. New workforce members complete training within [30 days] of hire and at least annually thereafter, and after any material change to policies or systems. Filter by Next due to see who's coming up. Satisfies security-awareness training at 45 CFR § 164.308(a)(5)(i) and privacy training at § 164.530(b).
See where your organization stands on the controls this template cites.
Join Us