In addition to the HIPAA Privacy Official, each covered entity must have a HIPAA Security Official. This may or may not be the same person. You should know the name and contact information of your facilities' Privacy and Security Official(s).