5.6 The Quick Response Checklist

The Quick Response Checklist has been issued by the U.S. Department of Health and Human Services. It ensures that an entity or individual undergoes specific procedures during a breach. The checklist responds to cyber security incidents and has three main key points:

• Creating contingency and response plans
• Sending a report of the response to appropriate law enforcement agencies
• Reporting the breach to OCR and any affected individuals.

Even though the response to a cyber security event will depend on the circumstance, covered entities must establish a cybersecurity response team to deal with such threats.