Proof health information is protected, every quarter.

The HIPAA Security Rule requires administrative, physical and technical safeguards for electronic health information, starting with a risk analysis. Compliance: HIPAA gives you quarterly evidence that those safeguards are in place and working, whether you provide care directly or handle health information for someone who does.

Up to$500,000Cyber WarrantyBacked by Cork Inc.

Book a call What the rule asks for

At a glance

Package: Compliance: HIPAA
Evidence: Compliance Posture Report, quarterly
Stacks on: Complete IT: Managed or Co-Managed

Does this apply to you?

It likely applies if you are one of these:

A non-profit that provides health or care services
A law firm that receives clients' health information as a business associate

What the rule asks for, and what you receive.

01
Complete a risk analysis
Risk analysis support, kept current
Risk analysis records
02
Put administrative safeguards in place, like policies and training
Policies and awareness training
Policy and training records
03
Put physical safeguards in place, like device and facility protection
Device management and protection
Device protection evidence
04
Put technical safeguards in place, like access controls, audit logs and encryption
Access controls, audit logging and encryption
Access, audit log and encryption evidence for health information