# HIPAA 164.308(a)(8)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-a-8 · Id: `criterion:hipaa:164.308(a)(8)`

> The entity evaluates on a set schedule how well its security policies and procedures meet the rule.

The entity evaluates on a set schedule how well its security policies and procedures meet the rule.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(a)(8)` |
| Satisfied by | [Continuous control testing](/systems/trust-and-governance/controls/continuous-testing) |