164.308(a)(7)(ii)(A) Data Backup Plan (Required)
Administrative safeguard · Required
The requirement as we hold it
Data Backup Plan (Required). Establish procedures to create and maintain retrievable exact copies of ePHI. NIST recommends offline or immutable backups, encryption, and regular restoration testing.
The examiner asks
- Show me how you create and maintain retrievable exact copies of ePHI.
- When did you last restore from backup, and where is that test recorded?
Evidence to bring
- the backup plan
- the last restore test
Source: 164.308(a)(7)(ii)(A) at eCFR. Our statement of the clause, not the instrument verbatim.