Guide · 7 min read
What a HIPAA risk analysis actually has to contain
The Security Rule language is short and the expectations are not. Here is what a defensible risk analysis includes and what auditors look for first.
Coming soon
Resources
Practical guides, no scare tactics
Written for practice administrators and founders who need to make a decision this month.
Downloads
Gated guides
The HIPAA risk analysis readiness checklist
A 12-page checklist of the documents, systems, and interviews needed before an assessment starts. Placeholder download.
The payer questionnaire answer kit
Reusable answer language and an evidence index for common payer and customer security reviews. Placeholder download.
Blog
Recent writing
Full articles coming soon.
Guide · 6 min read
Answering a payer security questionnaire without stalling the contract
How to build a reusable evidence set so the next 120-question review takes an afternoon instead of three weeks.
Coming soon
Article · 5 min read
Backups are not a ransomware plan
Restore testing, segmentation, and privileged access decide recovery time. Backups alone decide almost nothing.
Coming soon
Article · 4 min read
What belongs in a board security update
Two pages, four numbers, and one decision to make. A template for reporting posture to owners and boards.
Coming soon
Ready to talk?
A 30-minute scoping call covers your setup, your deadlines, and what a fixed-fee engagement would look like.