Security risk assessments for chiropractic and small healthcare offices
The HIPAA Security Rule requires practices to assess the risks to the patient information they store and send. I make that assessment clear and useful.
What I review
- Access to your practice management and records systems.
- Front desk computers, shared logins, and staff accounts.
- Email and patient communication.
- Office Wi-Fi, including whether guest access is separate.
- Backups of patient data.
- Vendors who handle patient information for you.
What you get
- A prioritized fix list with the cost and effort for each item.
- A walkthrough with you and your office manager.
- Documentation to keep on file.
A risk assessment is one part of HIPAA compliance. It doesn’t make a practice compliant on its own, and I don’t provide legal advice.
Common questions
How often should we do this?
Review and update it regularly, and whenever your systems or vendors change. Many practices do it yearly.
Doesn’t our records software vendor cover this?
Your vendor protects its own systems. Your office’s computers, accounts, Wi-Fi, and staff practices are your responsibility.
Not sure where you stand?
A 30-minute call is enough to tell whether a review makes sense for you, and what it would cost.