HIPAA Risk Assessment
Comprehensive HIPAA Security Rule risk assessments covering PHI inventory, safeguard reviews, and BAA mapping to satisfy OCR requirements and protect critical health data.
Core Focus Areas
The 6-Phase Workflow
1. Scoping
Confirming covered entity or business associate status and defining workflows that transmit PHI.
2. PHI Inventory
Inventorying data flows, classifications, and access populations across structured and unstructured sources.
3. Safeguards Review
Assessing administrative, physical, and technical safeguards to ensure secure facility access and transmission.
4. Risk Analysis
Performing formal risk analyses to identify threats, assess controls, and rate likelihood and impact.
5. Business Associate Review
Inventorying business associates and reviewing existing BAAs to identify subcontractor flow-down obligations.
6. Remediation Plan
Delivering a prioritized remediation plan and policy updates to constitute an OCR-ready evidence pack.
What You Receive
Executive Summary
A documented HIPAA risk analysis and comprehensive business associate BAA gap report.
Technical Findings
A complete PHI inventory, data flow map, and a prioritized technical and administrative remediation plan.
Assurance & Verification
An OCR-ready evidence package containing scoping documents and complete safeguard reviews.
Get Started
Pricing depends on your scope. After the scoping call, we review what you need and send you a clear quote for this service. NDA available.
Schedule Your Scoping Call