I came across a pretty good list of topics that Auditors ask for in a HIPAA audit. This is usually the stuff looked at during a HIPAA risk assessment too. If you haven’t incorporated all of these topics in your risk assessment then now is a good time to go through the list and update your tactics.