HIPAA Compliant Security Risk Assessment for Physician Practices

The HIPAA Security Rule requires all physician practices to evaluate risks and vulnerabilities to Protected Health Information in their computer systems.

Ensure your practice conforms to HIPAA security policies and procedures with this Online Security Risk Assessment.

Features of the Online Security Risk Assessment

This online security risk assessment from HIPAA Risk Analytics helps your practice ensure the security of the Electronic Protected Health Information (ePHI) that you maintain in your computer network.


This HIPAA security risk assessment is based on requirements of information security that help protect the confidentiality, integrity, and availability of your patient records.

Risk Management

The online security risk assessment is based on the audit protocols used by the Office of Civil Rights when it conducts HIPAA audits. Ensure that you are meeting all of the documentation required to pass an audit.

User Friendly

Each section in the risk assessment can be completed by office staff or by business associates. Security questions guide you through the HIPAA security standards. Each question has its own drop down help menu with extensive notes.

Lower Your Costs

For $699 your practice can save more than half the cost of an outside consultant conducting a risk assessment for you. Your office can answer the security questions and print out a risk assessment report that meets requirements of HIPAA, MIPS and Meaningful Use.

Don't just take our word for it.

Watch a walkthrough of the system

Watch Now

Read a Sample of the Security Risk Report

Review Now

Explore the security risk assessment

View Guided Tour

Take your security risk assessment with you.

The HIPAA Online Security Risk Assessment is designed with you in mind. You can fill out the survey anywhere, from your PC or mobile device.

Work is different today. Teams can be more collaborative and work together from many different locations. The Online Risk Assessment provides that mobile flexibility.

Sign-up Today

Benefits of the Online Security Risk Assessment

The HIPAA Security Rule requires physician practices to evaluate the security risks and vulnerabilities in their computer systems and to implement policies and procedures to address those risks and vulnerabilities.
Completing this online risk assessment helps ensure that your practice complies with the Security Rule.

Complete Coverage

Covers all sections of the HIPAA Security Rule and helps you identify every document the regulations require your practice to have. Let this website do the work for you.

Technical Inventory

Lets you add a complete inventory of the technologies you use in your practice so that you can better secure them. If you already have a technical inventory, you can upload it to a secure central storage included with this security risk assessment.

Print out Risk Assessment Report

When you complete all of the questions int he security risk assessment, you can immediately print out a Risk Assessment Report that offers steps for risk mitigation

Frequently Asked Questions

The HIPAA security standards have been in place for almost two decades. One of the first requirements of HIPAA security is for every covered entity to conduct a risk analysis to assess the practice’s vulnerabilities and risks inherent in protecting the electronic protected health information (ePHI). Physician practices that have not completed a risk assessment can face fines from the Office of Civil Rights (OCR).
The technical inventory helps you identify all of the equipment in your practice that stores or transmits electronic protected health information (ePHI). The more details you can include in this technical survey, the better documented your inventory will be.
This online risk assessment lets you assign staff members to different sections of the survey, which could be an efficient approach to completing the survey.
The risk assessment report summarizes the findings of the risk analysis and identifies policy and procedure documents that you need to develop.

Pricing for every business, at any stage

All pricing packages are backed up by a 30-day money back guarantee.