HIPAA for Humans
Before you launch your health tech product and before you sign contracts with any customers, you must complete a thorough and accurate HIPAA risk assessment. A risk assessment is required by law and it is the first document investigators will ask for if there’s a security incident involving patient data.
But don’t view this as just a bureaucratic hurdle. The risk assessment is an opportunity to document your processes, make your product more secure, and ultimately make your company more valuable.
This Project is aimed for early stage health tech startups who have begun to build their teams and decide on their tech stack. Now is the time to build a foundation for security, privacy, and compliance. We’ll interview technical and business stakeholders at your company to create customized risk assessment and security roadmap for your new product. Requires 2 to 3 hours of work from your team. Deliverable is a risk assessment report approximately 10 pages long.
This Project will give your team a clear implementation plan. And it will give your investors the confidence that you are proactively addressing your legal obligations.
Not only will you learn important facts about HIPAA, you’ll learn a risk management philosophy that balances your business goals with regulatory compliance.
There’s more to HIPAA than just technology. We’ll be discussing software development, hosting, office IT operations, hiring practices, contracts with your customers, and more. Together, we’ll identify all the key stakeholders at your company.
I’ll lead a video call with your team so I can learn about current and planned operations, both technical and strategic. I’ll line up everything to the HIPAA requirements and also bring in best practices from NIST 800-53, the cybersecurity “Bible.”
About a week after our meeting, I’ll be ready with a customized risk assessment report. I’ll present it to your team and walk through everything. My recommendations will be realistic and focused on creating business value, not just “compliance.”
As your company grows, new questions pop up. I’m always happy to take a call from a client and talk through new ideas. I’ll support you long term and I’ll be here when a new consulting project will help you unlock more growth.
Talk to one of our experienced risk analysts
Get some clarity from one of our cybersecurity experts