9 RESOURCES

Risk Management

Risk assessment tools, audit preparation checklists, and guides on encryption, breach notification, and regulatory risk.

Cyanotype of an open server closet with a rack, coiled cables and a clipboard on the doorFIG · 01
An open server closet with a rack, coiled cables and a clipboard on the door.

Start here

First-party tools

Guided HIPAA Risk Assessment that follows the OCR audit methodology — free, no email gate

Walks you through administrative, physical, and technical safeguards in the order OCR auditors check them. Aligned with NIST SP 800-30. Outputs a printable risk register you can keep on file — failure to document a risk assessment is the #1 finding in HIPAA settlements.

Run the assessment

Tools

5 tools

HIPAA Risk Assessment Template

Guided assessment covering all administrative, physical, and technical safeguards

HIPAA Audit Checklist

Prepare for OCR audits with a comprehensive checklist across all HIPAA domains

Bloodborne Pathogens Exposure Control Plan Generator

Build the written OSHA 1910.1030 bloodborne pathogens Exposure Control Plan your practice must have

HIPAA Breach Notification Letter Generator

Generate a patient breach notification letter with every 45 CFR 164.404 required element

HIPAA Incident Report Form

Document a privacy or security incident and run the four-factor breach risk assessment

Guides

4 articles

HIPAA Encryption Requirements

Encryption standards for data at rest and in transit under the Security Rule

Read guide

HIPAA Breach Notification Requirements

60-day notification timeline, breach risk assessment, and reporting procedures

Read guide

Stark Law & Anti-Kickback Statute: A Plain-Language Guide

Referral restrictions, safe harbors, and compliant arrangement structures

Read guide

Bloodborne Pathogens Training Guide

OSHA-compliant training requirements, exposure plans, and post-incident procedures

Read guide