6 RESOURCES

Risk Management

Risk assessment tools, audit preparation checklists, and guides on encryption, breach notification, and regulatory risk.

Start here

First-party tools

Guided HIPAA Risk Assessment that follows the OCR audit methodology — free, no email gate

Walks you through administrative, physical, and technical safeguards in the order OCR auditors check them. Aligned with NIST SP 800-30. Outputs a printable risk register you can keep on file — failure to document a risk assessment is the #1 finding in HIPAA settlements.

Run the assessment

Tools

2 tools

HIPAA Risk Assessment

Guided assessment covering all administrative, physical, and technical safeguards

HIPAA Audit Checklist

Prepare for OCR audits with a comprehensive checklist across all HIPAA domains

Guides

4 articles

HIPAA Encryption Requirements

Encryption standards for data at rest and in transit under the Security Rule

HIPAA Breach Notification Guide

60-day notification timeline, breach risk assessment, and reporting procedures

Stark Law & Anti-Kickback Guide

Referral restrictions, safe harbors, and compliant arrangement structures

Bloodborne Pathogens Training

OSHA-compliant training requirements, exposure plans, and post-incident procedures