Mock HIPAA Auditthe OCR examiner, before the exam

164.308(a)(3)(ii)(B) Workforce Clearance Procedure (Addressable)

Administrative safeguard · Addressable

The requirement as we hold it

Workforce Clearance Procedure (Addressable). Determine that access to ePHI is appropriate. NIST recommends background screening proportionate to role sensitivity and documented clearance decisions.

The examiner asks

Evidence to bring

Source: 164.308(a)(3)(ii)(B) at eCFR. Our statement of the clause, not the instrument verbatim.

Run this pack against the rule