Browse categories
Explore
Fiverr Pro
English
$
USD
I will create an ephi security risk assessment for hipaa compliance
Licensed U S Healthcare Attorney HIPAA, PHI and ePHI Risk Specialist
I am Sally S Rock, a licensed U.S. Attorney (Bar #129804) specializing in HIPAA regulatory compliance, health data privacy, and cybersecurity governance. I provide defensible PHI and ePHI risk assessm...
About this Gig
Under 45 CFR § 164.308(a)(1)(ii)(A), conducting an annual ePHI Security Risk Assessment (SRA) is mandatory for HIPAA compliance. Inadequate risk analyses remain the primary cause of federal OCR fines and breach settlements.
I am Sally S Rock, a licensed U.S. Attorney (Bar #129804). I draft comprehensive, legally defensible ePHI Security Risk Assessments tailored to digital health startups, clinics, and Business Associates.
My assessment methodology evaluates your electronic data footprint against the exact standards government regulators enforce.
Deliverables Include:
- Defensible Security Risk Assessment aligned with NIST SP 800-30
- Detailed mapping of all ePHI repositories, transmission channels, and access points
- Threat and vulnerability analysis with impact and likelihood scoring
- Identification of regulatory gaps across Security Rule specifications
- Professional, audit-ready legal documentation
Ensure your compliance documentation can withstand regulatory inspection. Send a message with your project scope to get started.
Field of law:
Health & medical
Target country:
Worldwide
Legal consulting Gigs are not screened
Please note that there is no screening process for this service. We recommend that you message the freelancer and check all necessary details before placing your order. Pro freelancers in this category have gone through a vetting process. You can find more details here.
Other Legal Consulting Services I Offer
FAQ
Will this assessment protect me during an OCR audit?
While no assessment stops an inquiry, having an attorney-drafted, methodologically rigorous SRA is your primary legal defense to demonstrate good-faith compliance and avoid willful neglect penalties.
How do we coordinate without phone or video meetings?
All intake, documentation sharing, and reviews take place directly within Fiverr’s messaging workspace, allowing for an efficient, asynchronous legal review.
Can you assess health tech and SaaS applications?
Yes. I routinely assess cloud-based health platforms, telehealth software, EHR integrators, and healthcare vendors to ensure full statutory compliance.
Does your assessment align with NIST standards?
Yes. I structure assessments using methodology aligned with NIST SP 800-30, the framework preferred by HHS and the Office for Civil Rights during compliance reviews.
Is an annual ePHI Security Risk Assessment legally mandatory?
Yes. Conducting an accurate and thorough assessment of potential risks and vulnerabilities to ePHI is a non-negotiable requirement of the HIPAA Security Rule.
