Technical HIPAA Risk Assessor

Identify critical vulnerabilities in your clinic's IT architecture. No data is stored; all logic runs in your browser.

JavaScript is disabled. Please read our HIPAA Security guide instead for manual assessment criteria.

Identity & Access Staff share logins for generic workstations (e.g., front desk, nurses station) Multi-Factor Authentication (MFA) is NOT enforced for remote email access Terminated employees are not removed from all systems within 24 hours

Infrastructure & Data Workstation hard drives are NOT encrypted (BitLocker/FileVault) We use consumer messaging apps (iMessage, WhatsApp) for patient data We have on-premise servers older than 6 years We do not test our backup restoration process quarterly

Technical HIPAA Risk Assessor

Risk Score: High

Related Reading