Assign policies and procedures to the Security Rule citations they address so you can later see your gaps (see below). Now, you can also assign each policy to your employee’s job roles. This allows each of your teammates to know exactly how their job is responsible for ePHI.
§164.316(a), §164.316(b)(1), §164.316(b)(2)