Getting started
Your dashboard: the roadmap
What each step card on the Privacy Officer dashboard means, what completes it, and a good order to work in.
Your HIPAA Compliance Dashboard is your roadmap. Each step card shows Pending, In Progress, Completed, or Locked. Click any card to jump to that area.
The steps
| # | Card | Completed when | Help |
|---|---|---|---|
| 1 | Assign Privacy Officer | Privacy Officer and Organization Name are saved | Initial settings |
| 2 | Security Risk Assessment | You completed an SRA in the last year | SRA |
| 3 | Gap Analysis | You've opened and reviewed it | Gap analysis & remediation |
| 4 | Remediation Plans | Every plan is marked completed | Gap analysis & remediation |
| 5 | User Invites & Training | Every active employee finished both modules in the last year | Employees & training |
| 6 | Review Policies | Policies have been reviewed or published | Policies |
| 7 | Publish Policies | Tracks publishing and employee sign-off | Policies |
| 8 | Vendor Management | Tracks vendors, BAAs, reviews, and risk assessments | Vendors & BAAs |
| 9 | Site & Network Audit | Completed in the last year | Audits & devices |
| 10 | Data & Device Audit | Device inventory updated in the last year | Audits & devices |
| 11 | Incident Management System | Your organization has logged an incident | Incidents |
A good order to work in
Run your Security Risk Assessment
Everything else builds on it. Every "No" becomes a remediation plan.
Review your gaps and work your plans
Attach evidence as you fix things and mark plans complete.
Invite your team and assign training
Staff appear once they finish their onboarding email.
Review and publish policies
Publishing sends each policy to your team to sign.
Add vendors and execute BAAs
Sign inside the portal and send your vendor a link.
Complete your audits
The Site & Network Audit, plus the device inventory that builds itself as staff onboard.
Know where incidents go
Make sure you and your team know where Report and Review live.
It's a yearly cycle
Several steps are annual: the SRA, the audits, training, policy sign-offs, and vendor reviews. A year after you complete one, it drops out of Completed. About 30 days before, a blue "due soon" banner appears at the top of your dashboard, and the bell icon lists anything that needs attention. See Reminders and emails.