All programs / HIPAA / Security Program Build
For new practices and established ones whose policies need retooling. Answer guided questions once, and turn them into 12 tailored policies and plans that describe how your practice really protects patient information.
The Security Rule doesn’t just ask whether you protect patient information. It requires you to document how, and to keep that documentation current.
Covered entities must implement written policies and procedures for the Security Rule standards and retain them for six years, under 45 CFR §164.316.
Policies that don’t match your actual systems, staff and vendors are a red flag in any review. They need to describe how your practice really works.
For each addressable safeguard, you must document what you implemented, what alternative you chose, or why it isn’t reasonable for your practice.
All three options use the same questionnaire, so you can start free and step up without redoing your answers.
For practices that want to organize their program information themselves.
No account or payment required
For practices that answer the questions and want the documents done right.
Everything in the free questionnaire, plus:
For practices that want professionals to build the program with them.
Introductory price for practices up to 20 staff. Larger practices quoted.
The documentation package and guided build produce a complete, practice-specific set.
Most small practices need two to three hours, which can be split across several sittings. A checklist at the start tells you what to gather first so the questions go quickly.
Leave it blank. Everything missing appears in your missing-information report, and if you order documents, NBT Systems follows up on those items before finalizing.
They’re tailored drafts ready for your review. Your leadership adopts and signs them. We recommend having counsel review the Notice of Privacy Practices and Business Associate Agreement.
No. The program build gives you policies; the Security Risk Assessment evaluates your risks and safeguards. New programs should finish with a baseline assessment.
No. The questionnaire describes your practice, people, systems and vendors. Please don’t enter patient information anywhere.
Free to start. Expert help when you want it.
