HIPAA Security Program HIPAA Security Policies and Procedures The following policies pertaining to the Health Insurance Portability and Accountability Act (HIPAA) are administered by Information Technology. Policies DU - RISK ANALYSIS (IS - 02)DU - APPOINTMENT OF SECURITY OFFICER (IS - 03)DU - TRAINING AND AWARENESS (IS - 04)DU - SECURITY INCIDENT REPORT ON PROCEDURES (IS - 05)DU - HIPAA SECURITY AND BUSINESS ASSOCIATE AGREEMENTS (IS - 06)DU - CONTINGENCY PLAN (IS - 07)DU - ASSIGNMENT AND MANAGEMENT OF ACCESS PRIVILEGES (IS - 08)DU - SANCTIONS (IS - 09)DU - EVALUATION (IS - 10)DU - WORKSTATION SECURITY (IS - 11)DU - DEVICE AND MEDIA CONTROLS (IS - 12)DU - ACCESS CONTROLS AND AUTHENTICATION (IS - 13)DU - AUDIT CONTROLS (IS - 14)DU - ELECTRONIC TRANSMISSION SECURITY OF PHI (IS - 15)DU - INTEGRITY (IS - 16)DU - CREDIT CARD MERCHANTS (IS - 17)