HIPAA Security Readiness Assessment
Evaluate technology and security safeguards across 12 practical categories, identify potential gaps, and receive a prioritized readiness report.
Understand your current security readiness
Answer 36 questions about organizational technology controls. You will receive an overall score, category results, strengths, priority gaps, critical-risk findings, and recommended next steps.
- Complete results before any contact request
- No PHI, patient details, or legal conclusions
- Progress saved locally on this device
- Printable executive summary
Before you begin
Choose the answer that best reflects your current environment. Select “Not Applicable” only when a safeguard genuinely does not apply.
Completion tracks how many questions you have answered. The readiness score is calculated separately from the weighted value of each answer.
A practical view of technical safeguards
Security readiness describes how consistently an organization has implemented and maintained safeguards that reduce technology risk. It is broader than buying security products and includes governance, access, monitoring, recovery, training, vendors, and continuity.
Why risk analysis matters
A periodic risk analysis helps an organization understand where electronic protected health information may be exposed, which threats are most likely, and where limited resources should be directed first.
Why this is not certification
This calculator reviews self-reported technology controls. It cannot validate legal compliance, inspect documentation, test safeguards, or replace a formal HIPAA Security Risk Analysis.
Important disclaimer
This assessment is an educational technology and security readiness tool and is not a legal determination, compliance certification, or substitute for a formal HIPAA Security Risk Analysis. HIPAA compliance depends on administrative, physical, and technical safeguards as well as organizational policies, procedures, documentation, and applicable legal requirements.
Do not submit patient information or protected health information through this assessment.