IsMyBusinessCompliant.Com / ByteITAudit.Com

HIPAA Compliance Assessment — Medical Office • No pressure. No obligation. Just clarity.

Practice Information

Administrative Safeguards
Do you have a designated Security Officer?
Have you conducted a formal risk analysis in the last 12 months?
Do you have written security policies?
Is workforce training conducted at hire and annually?
Do you have an incident response plan?
Physical Safeguards
Are facilities with PHI access restricted?
Are workstations secured against unauthorized viewing?
Do you have secure device disposal procedures?
Technical Safeguards
Does each user have a unique login ID?
Is Multi-Factor Authentication (MFA) enabled?
Is data encrypted at rest?
Is data encrypted in transit?
Are audit logs enabled and reviewed?
Baas Safeguards
Do you have signed BAAs with ALL vendors handling PHI?
Do your BAAs include breach notification requirements?
Breach Safeguards
Can you notify affected individuals within 60 days?
Can you report to HHS within 60 days?

Free assessment • No credit card required

No Pressure. No Obligation. No Upsell. We're here when you need us.

Focus on your patients; we'll handle the compliance.