Compliance Audit

HIPAA Compliance Audit
& Risk Analysis

A full assessment of your practice's HIPAA Security Rule posture — technical, administrative, and physical — with a clear roadmap of what to fix first.

$1,997
One-time · No recurring fees
Request This Audit →

Who this is for

Dental and medical practices that need a real picture of their compliance risk — before an OCR inquiry, a cyber insurance renewal, or a painful surprise.

Have never had a formal HIPAA risk analysis
Are preparing for proposed Security Rule updates
Need documentation for cyber insurance
Want a prioritized fix list instead of generic advice

How the audit works

Five clear steps from request to remediation plan.

1
Request & confirm
Tell us about your practice. We confirm scope and schedule before any charge.
2
Collect & review
We gather the information and access needed to assess your environment.
3
Assess all four areas
Technical, administrative, physical, and formal risk analysis.
4
Deliver your package
Written reports plus a live 60-minute walkthrough with Dallas.
5
Leave with a plan
You know what matters most and what to do next.

What we audit

Every area of the HIPAA Security Rule — nothing is skipped.

Technical Security Assessment

Full network vulnerability scan across all devices and systems
Review of firewall rules, remote access configurations, and VPN settings
Evaluation of multi-factor authentication (MFA) implementation
Endpoint protection and antivirus coverage review
Wi-Fi segmentation audit — patient data vs. guest vs. staff networks
Cloud storage and email security configuration review

HIPAA Administrative Review

Review of all existing HIPAA policies and procedures
Business Associate Agreement (BAA) inventory — are all vendors covered?
Staff training records and security awareness documentation
Access control review — who has access to what PHI and why
Audit log review — are you tracking who accesses patient data?
Workforce sanction policy and termination procedure review

Physical Safeguards Audit

Workstation placement and screen privacy assessment
Physical access controls to areas containing PHI
Device disposal and media destruction procedures
Mobile device policy and remote wipe capability review
Visitor access and badge/sign-in procedures

Risk Analysis (Required by HIPAA)

Formal risk analysis document — required by the HIPAA Security Rule
Identification of all systems, devices, and locations that touch PHI
Threat and vulnerability assessment for each identified risk
Likelihood and impact scoring for every identified risk
Risk prioritization matrix for remediation planning

What you receive

Every audit includes these 8 deliverables — in writing.

1
Executive Summary Report
A plain-English overview of your current compliance posture — written for practice owners, not IT teams.
2
Technical Gap Report
Every identified vulnerability and missing control, categorized by severity: Critical, High, Medium, Low.
3
Formal HIPAA Risk Analysis
The documented risk analysis required by the HIPAA Security Rule — signed and dated for your records.
4
Remediation Roadmap
A prioritized action plan showing exactly what to fix, in what order, and what it will cost to close each gap.
5
Policy Gap List
A complete inventory of missing or outdated HIPAA policies with recommended templates.
6
BAA Inventory
A full list of your Business Associates and which ones are missing signed agreements.
7
Cyber Insurance Readiness Score
A score showing where you stand against common cyber insurance carrier requirements.
8
60-Minute Debrief Call
Dallas walks you through every finding personally, answers your questions, and explains what comes next.

Frequently asked questions

Schedule your Compliance Audit

Fill out the form below and Dallas will reach out within 1 business day. No payment until details are confirmed.

No payment collected here. Dallas will contact you to confirm details before any charges.