This entry is part 19 of 59 in the series Complete Guide to HIPAA Security Final Rule

(2) Implementation specifications (Required).

(ii) Availability (Required). Make documentation available to those persons responsible for implementing the procedures to which the documentation pertains.

Tell Me More:

The Availability implementation specification simply aims to make all relevant documentation available to workforce members who need it.  Policies and procedures are of no value to the organization if they are not communicated to and shared with appropriate members of the workforce.

This implementation specification requires that documentation be made available to those who need it in order to implement the requirements of the Security Final Rule.

complete set of HIPAA Security Policies and Procedures may be purchased here.

Questions to consider:

  • Has the organization communicated to workforce members where they may find and access policies and procedures and documentation related to the HIPAA Final Security Rule?
Series Navigation<< 164.308(a)(1)(ii)(B) Standard: Security management process – Risk Management164.308(a)(4)(ii)(B) Standard: Information access management – Access authorization >>

Michelle Caswell

Senior Director, Legal & Compliance at Clearwater Compliance
Michelle Caswell has over 14 years legal and healthcare experience and worked as a HIPAA Investigator for the U.S. Department of Health and Human Services, Office for Civil Rights where she ensured covered entities were in compliance with HIPAA, conducted complaint investigations and educated entities on HIPAA compliance. Michelle brings that experience to Clearwater Compliance as Senior Director, Legal and Compliance.