How Can I Use Compliancy Group's Software, The Guard, to Work on My HIPAA Security Risk Analysis?

Modified on Tue, 29 Jul at 2:00 PM

DISCLAIMER: The information provided in this article, other knowledge base articles, and the Compliancy Group website do not, and are not intended to, constitute legal advice. All information, content, and materials in the Knowledge Base and on the Compliancy Group website are for general informational purposes only.

Introduction

This article provides a general overview of how a subscriber to Compliancy Groups's software, The Guard, can use The Guard in their effort to work on a HIPAA Security Risk Analysis.

How Can I Use The Guard to Work on My HIPAA Security Risk Analysis?

Subscribers to The Guard can use the software to work on the Security Risk Analysis/Assessment (SRA):

Subscribers who have access to The Guard's Data Security, Breach, and Physical Safeguards Programs, can work on these programs and their controls to perform the Security Risk Analysis/Assessment (SRA).

Subscribers who have access to The Guard's HIPAA Risk Assessment Program can work on this program and its controls to perform the Security Risk Analysis/Assessment. The controls that are "Privacy" controls are not part of the Security Risk Analysis.

How Can I Create a Report of My Security Risk Analysis?

Users of the Guard can run a snapshot report for a given program. A snapshot report summarizes a Program's controls, control statuses, their associated risk rating (a function of likelihood and impact, and assigned tasks. Users can run the report for a selected snapshot date, which can be a date prior to the date the report is run. The report provides a "snapshot" of the controls, control statuses, risk ratings, and assigned tasks, as of the selected date. The report is currently generated as a .csv. The report can provide the following information:

1. Name of Program
2. Snapshot Date

3. Location (e.g., Org-Wide)
4. Control Group (e.g., Data Protection, Data Recovery, Malware Defenses)
5. Category (Administrative, Technical, Physical)
6. Control Number
7. Control Description
8. Whether the control is Critical
9. Response to the Control
10. Risk Level
11. Risk Score
12. Likelihood Score
13. Impact Score

To export a Snapshot Report for a program:

1. Navigate to the Programs module.
2. Select the desired program from the list.
3. Click the Options dropdown in the upper-right corner.
4. Select Snapshot Report to download a CSV file of the program

Subscribers who do not have these programs and who are interested in adding them to their subscrption can reach out to their Customer Success Manager (CSM) for assistance.