Browse categories
Explore
Fiverr Pro
English
$
USD
I will do a hipaa security risk assessment for your practice
Sulayman M
About this gig
HIPAA requires every practice to have a current, written Security Risk Analysis (45 CFR 164.308). It is the first document OCR asks for after a breach or complaint, and a missing one is among the most common findings in OCR settlements.
I am a healthcare IT Director with 20+ years leading technology and security for hospitals and clinics. I have run six EHR platforms and built security programs aligned to NIST CSF 2.0 and HHS 405(d).
What you get:
- Scoping call and asset inventory (EHR, M365/Google, devices, vendors)
- Review of all 47 Security Rule implementation specifications
- Risk register scored by likelihood x impact
- Prioritized remediation plan with owners and target dates
- Written report you can hand to an auditor, insurer or OCR
Ideal for independent physician, dental, behavioral health and specialty practices, and multi-site groups.
Please message me before ordering so I can confirm scope. Work is done remotely. This is a compliance assessment, not legal advice.
Get to know Sulayman M
Sulayman M
HIPAA and Cybersecurity Advisor for Small Practices
- FromUnited States
- Member sinceDec 2024
Languages
English
Healthcare IT Director with 20+ years running technology and security for hospitals and clinic networks. I help small medical, dental and behavioral health practices, and other small businesses, get HIPAA and cybersecurity basics done properly: Security Risk Analysis, written security policies, cyber insurance applications, Microsoft 365 hardening and incident response plans. Six EHR platforms, five migrations, NIST CSF 2.0 and HHS 405(d). Plain English, fully remote, never any patient data. Message me before ordering and I'll confirm scope.
FAQ
Will I need to share patient data (PHI) with you?
No. The assessment reviews systems, settings, policies and vendors, not patient records. Please do not send PHI through Fiverr. If screen-sharing is needed, we keep patient data off screen.
Is this different from the free HHS SRA Tool?
Yes. The HHS tool is a questionnaire you complete yourself. I do the analysis with you: identify your real risks, score them, and give you a prioritized plan and a finished written report.
What do you need from me to get started?
Your locations and staff count, a list of systems and vendors, any existing policies or prior risk analysis, and 2-3 hours of time from your practice manager and IT contact for interviews.
