OCR 2016 HIPAA Desk Audit Guidance on Selected Protocol Elements

This matrix from the Office for Civil Rights lays out the questions covered entities can be expected to answer at a HIPAA privacy audit as well as the documents one can expect to produce and the sections of the law they pertain to.