Free assessment — 8 sections — about 15 minutes
Start your HIPAA self-assessment.
Eight sections covering every area of the HIPAA Security Rule — from your ePHI inventory through workforce, technical controls, encryption, physical safeguards, business associates, and incident response. The same scope the Office for Civil Rights (OCR)’s Risk Analysis Initiative audits.
Work online
Answer directly in your browser. Your progress saves automatically.
Work on paper
Print the questionnaire, collect answers around the office, then enter them here.
What you get when you finish
An overall risk score — a plain-English read on where your practice stands against the Security Rule controls we assess. Critical gaps are flagged so you know what to prioritize first.
Your answers stay in this browser — nothing is sent to a server.