Menu Item
Experience IT
Cybersecurity
HIPAA
About us
Our Services
IT Support Request
Contact Us
Tech Tips

Menu Item
Experience IT
Cybersecurity
HIPAA
About us
Our Services
IT Support Request
Contact Us
Tech Tips

HIPAA Assessment

This is a preliminary indicator, not a formal Security Risk Analysis. Results are based on your self-reported responses and intended to identify potential gaps for discussion. This does not substitute for a Security Risk Analysis as required under 45 CFR § 164.308(a)(1)(ii)(A). Do not enter any Protected Health Information (PHI) in this form.

About Your Organization

Company name*

Your name*

Your work email*

Phone number*

Which best describes your organization?*

Approximate number of employees*

Approximate patient/client records*

Administrative Safeguards

45 CFR § 164.308

Has your organization completed a documented HIPAA Security Risk Analysis in the last 12 months?

Yes, completed in the last 12 months Yes, but more than 12 months ago No Not sure

Do all workforce members receive HIPAA security awareness training at least annually?

Yes, with completion records Yes, but informally / no records No Not sure

Is your staff tested regularly with phishing simulations or other security drills?

Yes, monthly or quarterly Yes, but only occasionally No Not sure

Do you have signed Business Associate Agreements (BAAs) with all vendors who access PHI?

Yes, all vendors Most of them Only a few None / Not sure

Do you have a documented incident response plan for security breaches?

Yes, documented and tested Documented but never tested No formal plan Not sure

Do you have a documented sanction policy for workforce members who violate security policies?

Yes No Not sure

Physical Safeguards

45 CFR § 164.310

Are workstations that access PHI located so screens are not visible to the public?

Yes, all of them Some are, some aren't No

Are mobile devices (laptops, phones, tablets) used to access PHI encrypted?

Yes, all are encrypted Some are No Not sure

Do you have a documented process for sanitizing devices before disposal or reuse?

Yes No Not sure

Technical Safeguards

45 CFR § 164.312

Is multi-factor authentication (MFA) enforced for email and remote access?

Yes, both email and remote access Email only Remote access only Neither Not sure

Are workstations and servers patched on a documented schedule?

Yes, monitored and automated Yes, but manual No Not sure

Are your firewall and all endpoints (computers and devices) actively monitored by an IT provider 24/7?

Yes, 24/7 monitoring Business hours only No active monitoring Not sure

Are backups taken daily, stored offsite/cloud, AND tested for restoration at least quarterly?

Yes, all three (daily, offsite, tested) Daily and offsite, but not tested Daily backups only, no offsite No regular backups Not sure

Do you use email filtering for phishing and malware?

Yes, advanced (with simulations or training) Yes, basic (built-in Microsoft/Google filters) No Not sure

Is email containing PHI encrypted when sent to external parties?

Yes, with a dedicated encryption tool TLS in transit only (no content encryption) No Not sure

Do you have endpoint protection (antivirus or EDR) on all devices, centrally managed?

Yes, managed EDR on all devices Yes, basic antivirus on all devices Some devices covered, some not No Not sure

By submitting, you consent to Advatek contacting you about your assessment results.

YOUR HIPAA SECURITY POSTURE

0/100

—

Ready to close these gaps?

Schedule a 30-minute call with an Advatek security specialist to walk through your results and build a remediation roadmap. No cost, no obligation.

Schedule Your Call

Advatek is an IT service company specializing in Cyber Security and compliance for businesses of all sizes .

Cyber Security solution services in florida USA, IT audit services in florida USA, HIPAA compliance services in florida USA, HIPAA audit services in florida USA,Home health software services in florida USA, IT security services in florida USA, IT managed servicesin florida USA, IT medical solution services in florida USA, IT Healthcare solution services in florida USA, IT home health solution services in florida USA, IT support solution services in florida USA, IT nursing homes solution services in florida USA

IT Services

Cybersecurity
Experience IT
About us
Our Services
Tech Tips
HomeCare HomeBase Support

Support

IT Support Request
Contact us
Blog

info@advatek.com

Memphis office
901.450.4500

Boca Raton office
561.467.4600

www.advatek.com

Instagram Facebook-f Linkedin