HIPAA Security Program HIPAA Security Policies and Procedures The following policies pertaining to the Health Insurance Portability and Accountability Act (HIPAA) are administered by Information Technology. Policies Risk Analysis (IS - 02)Appointment of Security Officer (IS - 03)Training And Awareness (IS - 04)Security Incident Report on Procedures (IS - 05)HIPAA Security and Business Associate Agreements (IS - 06)Contingency Plan Policy (IS - 07)Assignment and Management of Access Privileges (IS - 08)Sanctions (IS - 09)Evaluation (IS - 10)Workstation Security (IS - 11)Device and Media Controls (IS - 12)Access Controls and Authentication (IS - 13)Audit Controls (IS - 14)Electronic Transmission Security of PHI (IS - 15)Integrity (IS - 16)Credit Card Merchants Policy (IS - 17)