All programs / HIPAA
Whether you need this year’s risk assessment or a security program built from the ground up, start with a free guided questionnaire and get expert help when you want it.
You need your annual Security Risk Assessment: an evaluation of how well your safeguards work and what to fix next.
You need a Security Program Build: tailored policies and documentation first, then a baseline risk assessment.
The risk analysis required by 45 CFR §164.308(a)(1), built on the structure of the HHS SRA Tool.
The written policies and plans the Security Rule requires, tailored to how your practice actually works.
A security program build gives you the policies; the risk assessment tests them. New practices typically start with the program build and finish with a baseline risk assessment, then repeat the assessment every year.
Adopt tailored policies, name your Security and Privacy Officers, and document your systems and vendors.
Run your first Security Risk Assessment to confirm the safeguards work as written.
Work the prioritized remediation plan, with NBT Systems’ help where you want it.
Repeat the risk assessment annually and whenever your practice changes.
Start with the Security Program Build. An assessment measures your safeguards against your policies, so without policies there’s little to assess. A program build followed by a baseline risk assessment is the fastest path to a documented program.
Yes. Guided program build clients receive a discounted baseline Security Risk Assessment when the two are booked together. Ask about it on your consultation call.
No. Both questionnaires ask about your practice, systems and safeguards, never about patients. Please don’t enter patient information anywhere.
No. HHS does not issue or recognize HIPAA compliance certifications. What matters is a current risk analysis, written policies, and evidence that you follow them.
Start free with either program, or talk to NBT Systems first.
