Create a HIPAA Workplan

A HIPAA Workplan helps organizations document and track corrective actions for HIPAA compliance items identified through assessments. Creating a workplan allows you to assign tasks, set due dates, add attachments, and monitor progress to closure.

Corrective Action Plan 

• Action Plan Risk Type: Linked HIPAA Risk Assessment details appear in the top left.
• Status: The status of all milestones included in the action plan. (For example, if there are three milestones and one is marked as Compromised and two are Complete, the action plan status will be Compromised.)
• Accountable: This is the Accountable User identified through the assignment of the HIPAA Risk Assessment survey. This user is responsible for monitoring the action plan.
• Milestones: Milestones are pre-populated with the selected Recommended Actions from the associated HIPAA Risk Assessment. Click the milestones to open the details and tasks on the right.
• Add Milestone: New milestones can be added to the action plan, even if they were not identified as Recommended Actions in the HIPAA Risk Assessment survey. To include additional (non-duplicate) milestones, select Add New Milestone.

Create Milestones

A Milestone is a Recommended Action carried over from a HIPAA Risk Assessment. 

For each Milestone, you can define the following:

• Target Date: Indicate the date all Tasks within the Milestone need to be completed.
• Details: Include documentation that outlines the purpose and requirements of the Milestone.
• Alert the CO: Notify the Compliance Officer that the Milestone needs immediate attention.
• Status: Update the Status to communicate potential risks to completing the Action Plan on time (can be updated by any user with access to the Action Plan).
• Remove Milestone: To delete a Milestone, access the menu (•••) in the top right.

Milestone Tasks

Each Milestone can have multiple Tasks connected to it. To create a Task, select a Milestone and click Add Task in the section below the details.

• Provide a brief description in the Title field.
• Provide a Due Date.
• Details: Add instructions to guide the assigned user.
• Assign a user.
• Include supporting documents if available.
• Mark as Complete: Indicate a Task is complete by toggling the switch to the right of the task name.
• Delete a Task if it is no longer required.

Workflow Tip: 

• Select Add Task to save the entry.
• Then, select Submit to save the updates made to the Milestone.

© Healthicity, LLC