Personnel should complete HIPAA Training annually in order to satisfy specific requirements within the HIPAA framework. Configuring this training within Drata is a key step to addressing the associated control. In order to do this on an annual basis, the training must be reset each year and Drata gives you the flexibility to do this on your timeline, either for all current personnel or on an individual basis.
BEFORE DIVING IN
Only account administrators or information security leads have access to this functionality.
HERE'S HOW
HIPAA Training can be reset for in bulk for all current employees and contractors or for individual personnel (current or former).
Reset HIPAA Training for all current personnel (employees and contractors)
From the Personnel page, click the 'Actions' button and select 'Reset HIPAA Training'. You will be prompted to confirm this action before any change is made.
Reset HIPAA Training for individual current and former personnel
From the 'Personnel Page', select an individual to open the Personnel Detail drawer.
Click the three-dot icon to open the menu and select 'Reset HIPAA Training'.
In both cases, you will be prompted to confirm your choice. Once confirmed, the HIPAA Training will be reset and the compliance check on the Personnel table, in the Personnel Detail drawer, and in the My Drata employee onboarding will display as 'Incomplete' or 'Failed'.
From this point, employees will be able to retain their HIPAA Training or upload evidence, depending on which option was selected in the 'Internal Security' settings.