Home / Assessments / HIPAA risk assessment
HIPAA security risk assessment
The HIPAA Security Rule requires a thorough, current risk analysis. We deliver one that stands up to scrutiny and a plan to close the gaps it finds.
A Fortify Experts HIPAA security risk assessment identifies where electronic protected health information lives, evaluates threats and safeguards across administrative, physical and technical controls, and delivers documented findings with a prioritized remediation plan.
What the assessment covers
- Where ePHI is created, stored, transmitted and received
- Administrative, physical and technical safeguards
- Business associate and vendor risk
- Likelihood and impact rating for each risk
- Documentation suitable for your compliance records
- A remediation plan ranked by risk
Questions we hear
Is a HIPAA security risk analysis required?
Yes. The HIPAA Security Rule requires covered entities and business associates to conduct an accurate and thorough assessment of the risks to electronic protected health information, and to keep it current.
How often should we update it?
Whenever your environment changes significantly, and on a regular cycle, commonly once a year.
Find out where you stand in one hour
Book a free security strategy consultation. You’ll talk with a senior advisor, not a salesperson, and leave knowing which next step fits.