SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-contingency-testing-addressable

How often should contingency plans be tested?

Organizations should periodically test and revise contingency plans.

Start playing free

  1. Never, once the plan is written
  2. Periodically, as an addressable item ✔
  3. Every day, as a required item

Why: Testing and revision procedures are addressable. Regular tests help find gaps before a real emergency.

Huh, didn't know that: Tests can include tabletop exercises, walkthroughs, or recovery simulations.

The dad joke
Why did the contingency plan do practice drills? It didn't want to freeze in a real disaster.
Like this card?
Play the game

References

Answer: Periodically, as an addressable item. Testing and revision procedures are addressable. Regular tests help find gaps before a real emergency.

  1. 45 CFR 164.308(a)(7)(ii)(D) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308
    Testing and revision procedures (Addressable). Implement procedures for periodic testing and revision of contingency plans.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.