(2) Implementation specifications (Required).

(ii) Availability (Required). Make documentation available to those persons responsible for implementing the procedures to which the documentation pertains.

Tell Me More:

The Availability implementation specification simply aims to make all relevant documentation available to workforce members who need it.  Policies and procedures are of no value to the organization if they are not communicated to and shared with appropriate members of the workforce.

This implementation specification requires that documentation be made available to those who need it in order to implement the requirements of the Security Final Rule.

complete set of HIPAA Security Policies and Procedures may be purchased here.

Questions to consider:

  • Has the organization communicated to workforce members where they may find and access policies and procedures and documentation related to the HIPAA Final Security Rule?
Series Navigation<< 164.308(a)(1)(ii)(B) Standard: Security management process – Risk Management164.308(a)(4)(ii)(B) Standard: Information access management – Access authorization >>