• Assessment of physical and technical safeguards in place to protect health information from any type of threat.
• Evaluation criteria for the assessment should include the following:
  • Initial phase
  • Security certification
  • Security accreditation
  • Continuous monitoring
• Security certification documentation
• Security plan content