Skip to main content
Annual Tabletop
Menu
HHS

HIPAA §164.308

HIPAA Security Rule §164.308

Administrative safeguards including contingency plan testing.

## What it is HIPAA Security Rule §164.308(a)(7)(ii)(D) requires covered entities and business associates to implement procedures for periodic testing and revision of contingency plans. Annual Tabletop's healthcare scenarios are designed to generate the documented evidence OCR auditors expect. ## What the AAR captures Each healthcare-segment AAR captures: contingency plan invoked, decisions made, gaps identified, and the IPP for closure. The artifact is OCR-ready in PDF and DOCX.

Run a HIPAA §164.308-aligned exercise.