GHB DentalTOOLS & INSIGHTS
Tools / Training readiness
FOR PRACTICES · FREE TOOL

HIPAA Security Training Readiness Checker

Review your security-awareness program and its supporting evidence. Get a readiness checklist and specific next steps.

Your inputs stay on this device.

Review your training program

Choose what you can verify. “Not sure” is a useful answer.

0 of 10 answered

1. Is a workforce security-awareness program documented?

Include management and relevant workforce members.

Current standard
2. Do you have a security reminders process?

Addressable does not mean optional; verify documented determinations.

Addressable specification
3. Does training address malicious software?

Review awareness of guarding against, detecting, and reporting malware.

Addressable specification
4. Does training cover login monitoring awareness?

Review recognition and reporting of access discrepancies.

Addressable specification
5. Does training cover password management?

Review creating, changing, and safeguarding passwords.

Addressable specification
6. Is onboarding and change-related learning organized?

Review how new staff and changed workflows receive instruction.

Recommended program design
7. Are completion records and materials organized?

Keep evidence and material versions; this checklist is not a legal audit.

Evidence practice
8. Are role-specific scenarios and reporting practiced?

Use realistic practice workflows without real patient information.

Recommended practice
9. Is a program owner and review process defined?

Assign accountability and a practical review cadence.

Recommended practice
10. Are knowledge checks followed up?

Use results to identify instruction that needs clarification.

Recommended practice

Your next step starts here.

Enter your inputs and calculate to see a complete, free result.

How to read your result

Documented items receive full weight, partially organized items half, and absent or unknown items zero. Higher scores show stronger reported readiness. Current standards, addressable specifications, and recommended practices are labeled separately. Scores never certify compliance. The current rule does not prescribe a universal annual course deadline.

Common questions

Does this certify compliance?

No. It reviews self-reported training organization and is not a complete HIPAA assessment.

Is annual training universally required?

Do not treat an annual refresh recommendation as a universal deadline in the current Security Rule. Verify current requirements and your own documented program.

Does addressable mean optional?

No. Evaluate what is reasonable and appropriate, document the determination, and consider an equivalent measure where appropriate.

Methodology & sources

Calculation and content version 1.0.0. Sources checked 2026-10-05. Input assumptions are shown in your result; estimates and checklists have the limits described above.

Read our shared methodology