Steve Alder at HIPAA Journal put together a solid general compliance checklist covering the organizational and administrative side of HIPAA - determining whether your org is required to comply, appointing Privacy and Security Officers, understanding PHI, breach notification procedures, and tracking regulatory changes. If you are looking for a starting point on the compliance program side of the house, this is a good one.