I will prepare a hipaa security risk analysis and policies for your healthtech

Building a healthtech product and a customer or investor asked for your HIPAA risk analysis? I prepare it in a format auditors and enterprise buyers recognise.

I spent 6 years leading privacy and information security risk for one of the largest hospital groups in Latin America (100+ systems, 10,000+ employees), after 7 years auditing IT controls at PwC.

What you get:

• Inventory of systems that create, store or transmit ePHI
• - Risk analysis aligned with NIST SP 800-30 and the HIPAA Security Rule
• - Scored risk register with owners and target dates
• - Prioritized remediation plan
• - Vendor BAA review (Standard and Premium)
• - Core security policies and incident response plan (Premium)
• - Editable Excel and Word files

How it works:

1. You answer a short questionnaire about your product, cloud setup and vendors
2. 2. I draft the analysis (AI-assisted, specialist-reviewed) and we review it together
3. 3. You get the final files within your revisions

I never need patient data. There is no official HIPAA certification; this is compliance documentation, not legal advice.