Benchmark your HIPAA Compliance Posture

Ten questions is all we need to provide insight into your state of HIPAA compliance. No account is required, but answer honestly to get a directional read on where you stand and where to go next, drawn from the same enforcement data used in a HowToHIPAA HIPAA Compliance Assessment.

This is an estimate, not the full assessment. Everything you enter stays in your browser until you decide to create an account.

1. Have you done a written security risk analysis (a look at where patient data lives and what could go wrong) within the last year?

YesPartlyNo

2. Does everyone who can reach patient data sign in with their own account, no shared logins?

YesPartlyNo

3. Is multi-factor authentication required on email and every system that holds patient data?

YesPartlyNo

4. Is patient data encrypted on laptops, servers, and backups, and whenever it's sent outside your organization?

YesPartlyNo

5. Do you have written HIPAA policies your team could find and follow today, reviewed within the last year?

YesPartlyNo

6. Has everyone on the team completed HIPAA training in the past year, with a record to show it?

YesPartlyNo

7. Do you track every laptop, phone, and drive that holds patient data, and wipe or destroy them before they leave?

YesPartlyNo

8. Does someone review your system activity logs on a regular schedule, not just collect them?

YesPartlyNo

9. Do you have a signed Business Associate Agreement with every vendor that touches patient data for you?

YesPartlyNo

10. If ransomware hit tomorrow, could you restore from a tested backup, and does a written plan say who does what?

YesPartlyNo

0 of 10 answered

HowToHIPAA

HIPAA without guesswork.

Join Us

product

How it works
Samples
Templates
Getting started
Glossary
Pricing

company

About
Contact
Sign in

trust

Security
Privacy
Terms

A point-in-time firm attestation based on the evidence reviewed as of the issue date; not a certification, guarantee, or audit.

Loading…

Skip to content

HowToHIPAA

Product Templates Guides

Industry Trends Pricing About Contact

Sign in Join Us

Benchmark your HIPAA Compliance Posture

Ten questions is all we need to provide insight into your state of HIPAA compliance. No account is required, but answer honestly to get a directional read on where you stand and where to go next, drawn from the same enforcement data used in a HowToHIPAA HIPAA Compliance Assessment.

This is an estimate, not the full assessment. Everything you enter stays in your browser until you decide to create an account.

1. Have you done a written security risk analysis (a look at where patient data lives and what could go wrong) within the last year?

YesPartlyNo

2. Does everyone who can reach patient data sign in with their own account, no shared logins?

YesPartlyNo

3. Is multi-factor authentication required on email and every system that holds patient data?

YesPartlyNo

4. Is patient data encrypted on laptops, servers, and backups, and whenever it's sent outside your organization?

YesPartlyNo

5. Do you have written HIPAA policies your team could find and follow today, reviewed within the last year?

YesPartlyNo

6. Has everyone on the team completed HIPAA training in the past year, with a record to show it?

YesPartlyNo

7. Do you track every laptop, phone, and drive that holds patient data, and wipe or destroy them before they leave?

YesPartlyNo

8. Does someone review your system activity logs on a regular schedule, not just collect them?

YesPartlyNo

9. Do you have a signed Business Associate Agreement with every vendor that touches patient data for you?

YesPartlyNo

10. If ransomware hit tomorrow, could you restore from a tested backup, and does a written plan say who does what?

YesPartlyNo

0 of 10 answered

HowToHIPAA

HIPAA without guesswork.

Join Us

product

How it works
Samples
Templates
Getting started
Glossary
Pricing

company

About
Contact
Sign in

trust

Security
Privacy
Terms

A point-in-time firm attestation based on the evidence reviewed as of the issue date; not a certification, guarantee, or audit.