Laserfiche WebLink
References: <br />45 C.F.R. § 164.308(a)(6)(i). <br />Standard <br />The Health Plan shall establish (and implement as needed) policies and procedures for responding to an <br />emergency or other occurrence (for example, fire, vandalism, system failure, and natural disaster) that <br />damages systems that contain ePHI. <br />Interpretation and Implementation Specifications <br />Data Backup Plan <br />(required) <br />Disaster Recovery Plan <br />(required) <br />Emergency Mode Operation <br />Plan <br />(required) <br />Testing and Revision <br />Procedures <br />(addressable) <br />Applications and Data Criticality <br />Analysis <br />(addressable) <br />References: <br />45 C.F.R. § 164.308(a)(7). <br />practicable, harmful effects of security incidents that are <br />known to the covered entity; and document security <br />incidents and their outcomes. <br />Contingency Planning <br />[Administrative Safeguard] <br />1. The Health Plan shall establish and implement <br />procedures to create and maintain retrievable exact <br />copies of ePHL <br />2. The Health Plan shall establish (and implement as <br />needed) procedures to restore any loss of data. <br />3. The Health Plan shall establish (and implement as <br />needed) procedures to enable continuation of critical <br />business processes for protection of the security of ePHI <br />while operating in emergency mode. <br />4. The Health Plan shall implement procedures for period <br />testing and revision of contingency plans. <br />5. The Health Plan shall assess the relative criticality of <br />specific applications and data in support of other <br />contingency plan components. <br />Evaluation <br />[Administrative Safeguard] <br />Standard <br />The Health Plan shall perform initial and periodic technical and non - technical evaluations of compliance <br />(required to establish extent to which security policies and procedures meet requirements). <br />City of Ramsey HIPAA Security Policy - 10 - <br />• <br />• <br />