Is your server’s hard drive encrypted?

Are all backup hard drives encrypted?

Are all mobile devices (tablets, laptops, smartphones) that contain protected health information encrypted?

Does your cloud backup use encryption for sending and storing data?

Is your server located in a secured location behind a locked door?

Is your server physically attached to something to prevent easy theft?

Are your passwords automatically required to be changed every 90 days or less?

Are employees allowed to share passwords?

Does each user have a different password?

Are your computers set to auto-lock when not in use?

Do you have privacy filters on monitors that can be seen by non-employees?

Do you send patient information via email using a separate encryption service?

Is your network secured with a firewall?

Does your wireless network have encryption enabled?

Is your patient WiFi network cordoned off from the rest of the network?