HIPAA Readiness Assessment

Twelve fast questions across Admin, Physical, and Technical Safeguards. Get an instant score, readiness band, and a branded gap report.

Organization

Organization Name Contact Email (optional) Role (optional)

Pick what best reflects reality today. Scoring: Strong (5) • Partial (3) • Not in place (1).

1) Risk Analysis & Management (164.308(a)(1)): Most recent enterprise risk analysis?

2) Workforce Security & Offboarding (164.308(a)(3)): Access removed on day of separation?

3) Security Awareness & Training (164.308(a)(5)): Phishing simulations + refreshers?

4) Contingency Plan (164.308(a)(7)): Tested backups & disaster recovery runbook?

5) Facility Access Controls (164.310(a)): Badge/visitor controls with logs?

6) Workstation Use/Security (164.310(b–c)): Screen lock & positioning standards?

7) Device & Media Controls (164.310(d)): Wipe/destruction with certificates?

8) Access Control—Unique IDs (164.312(a)): Any shared accounts remaining?

9) MFA for ePHI Systems (164.312(d) auth): MFA on EHR/VPN/admin?

10) Audit Controls (164.312(b)): Log retention & weekly review?

11) Integrity Controls (164.312(c)(1)): Tamper detection / hashing where appropriate?

12) Transmission Security (164.312(e)): TLS in transit; email encryption for ePHI?

Your score is an advisory snapshot, not a certification. The report will outline gaps and a 30–90 day plan.