/hipaa-gap

/cps-ind-healthcare:hipaa-gap

HIPAA Gap. Map current PHI handling against HIPAA Privacy + Security Rule; identify gaps and remediation plan.

When to use

When the engagement is in Healthcare Industry and scope explicitly calls for hipaa gap work. Look for keywords: healthcare, HIS, EMR, HIPAA, HL7.

Inputs you should gather first

• Engagement project.json (industry = healthcare, regulatory frameworks)
• Relevant client documents in the brain (run /cps:graph-query)
• Any prior CPS Healthcare Industry deliverables for cross-reference

Steps

1. Read project.json and confirm industry = healthcare.
2. Load the healthcare skill (plugins/ind-healthcare/skills/healthcare/SKILL.md).
3. Use the relevant industry subagent (see Integration table) for the analysis.
4. Apply the methodology in the skill, citing all sources (regulators, accrediting bodies, peer benchmarks).
5. Place output in 05_Deliverables_Final/ per CPS file-location standard. Filename: healthcare-hipaa-gap-<client>-<YYYYMMDD>.md.
6. Run /cps:verify-quality before marking complete.

Output shape

CPS-branded Healthcare Industry deliverable with Pyramid-Principle structure, source citations on every regulatory reference, and explicit recommendations.

Quality bar

• PHI handling findings cite specific HIPAA rule (164.312, 164.502, etc.)
• HL7-FHIR assessments cite USCDI version and specific resources
• Clinical workflow redesigns reduce documentation time without reducing safety