Free Checklist

The HIPAA Audit Request List

An OCR investigation opens with a document request list, and the organizations that struggle are the ones assembling that evidence for the first time under a deadline. This checklist turns the request list into a standing tracker: every item with its rule citation, the owner who produces it, where the evidence lives, and the date it was last refreshed.

• The full request tracker with rule citation, owner, evidence location, and refresh date per item
• Where each request usually breaks, and what auditors accept instead
• Worked risk analysis, PHI inventory, training, and log-review worksheets
• An addressable-specifications register for documenting the calls you made and why