Framework toolkit
HIPAA Security, Privacy & Breach Notification Rule Toolkit
13 editable templates: 8 Word, 5 Excel. Each one is listed below with page 1 and its sections.
₹5,499 incl. GST
Review cart (0)- 13 files you can edit in Word and Excel
- UPI, card or netbanking through Razorpay
Three of the 13. Open one to see its full outline.
Word38 KB
HIPAA Minimum Necessary Policy
- 1. Purpose
- 2. Scope
- 3. Role-Based Access
- 4. Routine Disclosures and Requests
- + 4 more
Excel9 KB
HIPAA Privacy Rule Assessment
- HIPAA Privacy
- Summary
Excel8 KB
HIPAA Ephi Inventory
- ePHI Inventory
What you get
All 13 files in this toolkit
Registers, logs and trackers1
-
HIPAA Ephi Inventory
An inventory of the systems and media that store, process or transmit electronic protected health information (ePHI), which underpins your HIPAA risk analysis (45 CFR…
Assessments and checklists3
-
HIPAA Privacy Rule Assessment
An assessment against the HIPAA Privacy Rule (45 CFR Part 164, Subpart E): the Notice of Privacy Practices, minimum necessary, permitted uses and disclosures, individual…
-
HIPAA Security Risk AssessmentStart here — Do you need HIPAA? Answer these before filling the assessment.
-
Plans, procedures and forms4
-
HIPAA Breach Notification Procedure✎ Set your risk-assessment process and notification templates for individuals, HHS and media.
-
HIPAA Business Associate Agreement✎ Name the parties, services and PHI, and ensure all required terms are included and flowed down.
-
HIPAA Compliance RoadmapA roadmap to drive your HIPAA Security and Privacy Rule assessments into a prioritised, owned plan.
-
HIPAA Contingency Plan✎ Set your backup scope and frequency, recovery objectives, and emergency-mode procedures and testing.
Policies and standards5
-
HIPAA Minimum Necessary Policy
✎ Define role-based access to PHI and your protocols for routine and non-routine disclosures.
-
HIPAA Privacy Rule Policy✎ Set your permitted uses, your notice of privacy practices and your process for individual rights.
-
HIPAA Sanction Policy✎ Set your disciplinary scale, how violations are investigated, and where records are retained.
-
HIPAA Security Rule Policy✎ Reference your risk analysis, your ePHI systems and whether encryption is applied at rest and in transit.
-
HIPAA Workforce Training Policy✎ Set your training cadence and platform, what it covers, and how completion is recorded.
₹5,499 incl. GST
How the files fit together
A suggested order
Our suggestion, not a requirement of the standard or the law.
- 1
Find the gaps
Start with the assessment workbooks to see where you stand.
3 files: HIPAA Privacy Rule Assessment, HIPAA Security Risk Assessment, HIPAA Security Rule Gap Assessment
- 2
Plan the work and the response
Use the plans, procedures and forms to set owners, dates and the steps to follow.
4 files: HIPAA Breach Notification Procedure, HIPAA Business Associate Agreement, HIPAA Compliance Roadmap, HIPAA Contingency Plan
- 3
Approve the policies
Edit the policies to match how you work, then get them approved.
5 files: HIPAA Minimum Necessary Policy, HIPAA Privacy Rule Policy, HIPAA Sanction Policy, HIPAA Security Rule Policy and more
- 4
Keep the records
Keep the registers and logs up to date as evidence for an audit or a review.
1 file: HIPAA Ephi Inventory
Questions
Before you buy
What exactly do I get?
13 editable files (8 Word, 5 Excel). Every file is listed on this page with its file name, size and number of sections.
How are the files delivered?
Digitally, after your payment is confirmed: we email download links to the address you gave at checkout. Each link works for 2 hours; you can ask for a fresh one from My purchases. Nothing is shipped.
How do I pay?
Through Razorpay, by UPI, card or netbanking.
Is GST included?
Yes. The price includes GST. To get a GST invoice, email [email protected] with your billing name, address and GSTIN.
Are these official documents of the standard body or regulator?
No. They are templates supplied by CynorSense Solutions Pvt. Ltd. They are not issued or endorsed by any standard body or regulator, and they are not legal advice. Using them does not by itself make an organisation compliant or certified.