They determine what you need and create a custom Business Associate Agreement, a risk management plan, a backup plan, and a disaster recovery plan. (lawyerist.com)
This should involve creating and executing business associate agreements. (lawtechnologytoday.org)
However, with the recent changes to the HIPAA law, Amazon began signing business associate agreements with covered entities. (lawyerist.com)