HIPAA-aligned IT services
IT services that support HIPAA's security requirements.
HIPAA expects you to assess your risks and protect patient data with documented safeguards. We handle the technical side so you can focus on patients. Serving practices in Lake Nona, Orlando and nationwide.
What the Security Rule expects
Three kinds of safeguards, and your IT touches all of them.
HIPAA's Security Rule organizes the protection of electronic patient information into administrative, physical and technical safeguards.
Administrative
The policies and processes: a documented risk analysis, written policies, staff training and agreements with the vendors who handle patient data.
Physical
Protecting the places and devices where patient data lives, such as workstations, laptops, servers and who can reach them.
Technical
The technology controls: user access, multi-factor sign-in, encryption, backups, updates and activity monitoring.
The risk analysis
The one document every practice needs.
A security risk analysis is the foundation of HIPAA's Security Rule. Here's what a good one involves.
- 1Find every system and device that stores or touches patient information.
- 2Identify the threats and weak points for each one.
- 3Rate how likely and how serious each risk is.
- 4Document the findings and a plan to reduce the biggest risks.
- 5Repeat it at least once a year and whenever your setup changes.
How we help
Start small, then go as far as you need.
Free
Health check
A 3-minute quiz that scores your practice and shows your top priorities.
Fixed price · from $1,500
Risk assessment
A documented risk analysis with a ranked action plan you can keep on file.
From $189/user/month
Ongoing support
Managed IT and security with the annual assessment, policies and staff training included.
- Plain-English findings your whole team can understand
- A written plan, in priority order, with the biggest risks first
- Practical fixes: multi-factor sign-in, encryption, backups and training
Questions
HIPAA questions, answered plainly.
What is a HIPAA security risk analysis?
It's a documented review of where your practice stores and handles patient information, what could go wrong, and what you're doing about it. Regulators treat a missing or outdated risk analysis as a leading enforcement issue, so it's the most important document to have.
Does using Microsoft 365 make us HIPAA compliant?
No. The tool is only part of the picture. It still has to be set up correctly, with multi-factor authentication, access controls and the right agreements in place, and your policies and people matter just as much.
Is the new HIPAA Security Rule in effect?
Not yet. HHS has proposed changes that would make measures like multi-factor authentication and encryption mandatory, but they aren't final and the timeline has slipped. The current rule still applies, and these protections are good practice today.
How much does a HIPAA risk assessment cost?
Our fixed-price HIPAA security risk assessment starts at $1,500. It gives you documented findings, a prioritized plan and the option to have us fix the gaps. Ongoing support is included in our Complete plan at $189 per user per month.
Are you a law firm, and is this legal advice?
No. We provide IT and security services that support HIPAA requirements. Compliance depends on your whole practice, and for legal questions you should consult a qualified attorney.
Find out where your practice stands.
Take the free health check, or book a quick call and we'll walk through what a risk assessment would cover.