Section 13.117 Performing an External Assessment

Question 1

External Assessment

Answer 1

Part of maintaining a robust security posture and ensuring compliance

Checklist and procedures vary depending on Governance, Risk and Compliane practices

Question 2

EXAMPLE: Sample checklist used for a HIPAA external assessment

HIPPA Audit Checklist

Answer 2

Purpose is to validate compliance with specific regulations and minimise cybersecurity risks

Question 3

Preparing for a HIPAA External Assessment

Answer 3

■ Examiners provide a checklist of questions that organizations must answer

■ Questions are answered as either “yes” or “no”

■ Evidence files, such as documents or links, must be provided to demonstrate
compliance

Question 4

Sample Checklist

Answer 4

■ Questions cover various aspects like general information, policies, procedures, and employee training

■ Organizations must provide evidence files as proof of compliance

■ External assessments aim to provide a quick overview of the organization’s
current risk posture