HIPAA for small clinics
Menu
Free risk assessment Policy kit & pricing Staff training preview Guides Sign in
Free risk assessment · 3 minutes

How exposed is your practice?

Twelve questions, weighted by what actually causes breaches at small clinics. You'll get a score out of 100 and your fixes in priority order.

01Have you done a written security risk analysis in the last 12 months?
02Do you have written HIPAA privacy and security policies that staff can find?
03Has every staff member had HIPAA training in the last year, with a record of it?
04Do email and your EHR/practice software require a second login step (MFA)?
05Do you have a signed business associate agreement (BAA) with every vendor that touches patient data?
06Are backups kept somewhere ransomware can't reach, and have you test-restored one recently?
07Are laptops and any devices with patient data encrypted?
08Do workstations lock automatically when someone walks away?
09When someone leaves, is their access to every system removed the same day?
10Do staff know exactly who to tell if they click a bad link or lose a device?
11Do you have a rule about texting or emailing patient information from personal phones?
12Is guest/patient Wi-Fi separate from the network your clinic computers use?
→Where should we send your results?

We'll email your results and a few short follow-up guides. Unsubscribe any time. Privacy policy.