Are you running an antivirus solution that's being monitored?
Yes
No
I Don't Know
Are you currently running Windows Server 2019 or later on your servers and Windows 11 on your workstations?
Yes
No
I Don't Know
Are you utilizing encryption with all email communications containing PHI?
Yes
No
I Don't Know
Are you utilizing MFA on workstations within your practice?
Yes
No
I Don't Know
Are all hard drives in your practice encrypted?
Yes
No
I Don't Know
Is your office utilizing a commercial-grade firewall with an active subscription?
Yes
No
I Don't Know
Is public Wi-Fi separated from the internal office network within your practice?
Yes
No
I Don't Know
Is your office using content filtering for web access?
Yes
No
I Don't Know
Do you regularly conduct security awareness training with all staff?
Yes
No
I Don't Know
Are all business-related software applications (financial software, practice management, imaging, etc.) on a currently supported version?
Yes
No
I Don't Know
Do you have an IT provider actively monitoring and maintaining your infrastructure?
Yes
No
I Don't Know
Do you run a daily backup that is encrypted and stored off-site?
Yes
No
I Don't Know
Does your office incorporate redundancy to reduce downtime due to failures?
Yes
No
I Don't Know
Do you have a Security Risk Assessment conducted at least every year?
Yes
No
I Don't Know
Have you identified a HIPAA Privacy Officer and HIPAA Security Officer who is responsible for ensuring compliance within your practice?
Yes
No
I Don't Know
Do you have unique logins and passwords for each employee to access practice management software?
Yes
No
I Don't Know
Low Risk With Minor Vulnerabilities
Moderate Risk With Several Significant Vulnerabilities
High Risk With Multiple Major Vulnerabilities