One Guy Consulting builds a full HIPAA program for small practices and business associates: security risk assessments, automatic gap analyses, self-generating remediation plans, and AI-tailored policies your staff will actually read. Chuck reviews every program himself, and gives you guidance on industry best practices. Software speed, human guidance, zero clients ever fined.
The same repeatable path Auditors expect, run start to finish. Each step builds on the one before it. Automation handles the repeat work, so a small team can keep up.
One page, three fields important enough that you’re locked out of every other step until this one is completed to start. This step is crucial since it allows you to check a requirement under HIPAA off your list, pre-sign agreements digitally, and designate your org a C.E., or B.A.
The Risk Analysis that informs each step of your HIPAA compliance plan that follows. Thanks to this one audit, which is more-or-less a questionnaire, we are able to infer everything we have to regarding gaps, remediation plans, and policies. Then, POOF, these items are simply in your account waiting for you.
A gap is a part of the law you're not following. The gap analysis generates the moment you finalize your security risk assessment. This reduces hours of repetitive work, where usually someone needs to match every last gap to each HIPAA regulation specification.
In a fashion similar to the automated gap analysis, the plans to fix your gaps will be waiting for you rather than you needing to brainstorm 50 ideas just to write down a plan to satisfy your gaps. Dive right in to fixing problems rather than just listing problems.
Inviting users to the platform to complete their training is fast and simple. After a quick verification and password setup, the employee will provide some network and device info, saving you the effort later.
Compliance Officers are encouraged to understand each policy in full. However, nothing says employees need to slog through hours of reading policies when a paragraph or two achieves the same thing.
After you have reviewed the policies enough to feel comfortable rolling them out to your organization, your next step is to disseminate the material for the immediate purpose of having staff train on them.
From the powerful vendor profile, organizations can track business relationships, BAA's, CA's, score vendors on risk, and fully execute important agreements that are stored in the tool.
18 questions comprise the Site and Network audit, so you’ll be in and out regarding that one in no time! Facility Access Controls, Workstation Use, Workstation Security, Device and Media Controls, Network & Infrastructure, and ePHI Data Flow are the over-arching categories addressed in this questionnaire.
One Guy Consulting steps a bit outside of the box to ensure accuracy on this next requirement. All of this is done while minimizing compliance officer effort. When employees onboard to the solution they answer some questions about their device and network which funnel right into the tool.
There are an infinite number of ways and methods in which reporting incidents can occur. The One Guy Consulting portal opts to build the feature right in. You have everything at your fingertips to handle incidents, but be sure to occasionally test it to make sure it works!
There are things that the federal government expects you to do on an ongoing basis. To ensure ongoing doesn’t become sometimes, most organizations operate on an annual cadence for HIPAA compliance plan renewals. Not only will we remind you when items are due again, but we’ll be right there to help you still, because that’s what One Guy Consulting does.
Most compliance platforms sell you the software and leave the interpretation to you. One Guy Consulting gives you software and guidance on industry best practices at the same time, every time. The software tailors your policies, maps your gaps, and builds your data inventory in a fraction of the time it would take any other way. You get compliant fast, but better yet - you can prove it.
One Guy Consultings HIPAA compliance blog is your go to resource for articles on anything from cybersecurity events, emerging technologies, and how to navigate this complicated regulation.
Every HIPAA and compliance term, A to Z, with eCFR citations and links to our detailed guides. Written so a practice manager can use it, not just a lawyer.
A broader security offering for the same small practices, run and monitored for you. Launching in the near future.
Chuck Weiselberg helped write the compliance playbooks at two of the biggest names in this space before starting One Guy Consulting. Roughly 23,000 meetings and 3,500 organizations later, not one of them has been fined or failed an audit.
Chuck Weiselberg, C.H.P. · Queens, NY · HIPAA since 2015
The cheapest serious HIPAA program on the market, by a wide margin.
One payment, two full years of coverage.
Enforcement, Threat Actors, Government Fines, and system vulnerabilities are already out there. Are you actually still waiting to become HIPAA compliant?
Thirty minutes, no pressure, no obligation. We look at where you stand and tell you the truth about it.
Each service area maps to a specific HIPAA duty. The platform automates the repeatable work. Chuck gives you his recommendations.
Identify every system, device, and workflow that stores, transmits, or accesses ePHI, then rate the risk. Your gap analysis and remediation plan are built from it.
Compare your current safeguards, records, and workflows against the regulation, automatically, so you can see exactly where you fall short before an auditor does.
Findings become a prioritized plan with assigned tasks, timelines, progress tracking, and completion records. AI drafts it; you approve it.
Customized, plain-language policies that reflect how your practice actually operates, with adoption records kept for audit. Roughly 38 templates.
Six training modules covering the Privacy Rule, Security Rule, breach reporting, and phishing awareness, with completion records and signed attestations.
A living inventory of every vendor that touches PHI, with digital Business Associate Agreements executed in-app and reviewed annually.
Report, assess, and document incidents with a breach workflow ready before you need it, including the four-factor risk assessment and notification steps.
One view of where you stand: what is complete, what needs attention, and your evidence organized and retained for the required six years.
A broader security offering for the same small practices, run and monitored for you. Launching in the near future.
A free 30-minute review, no obligation. We find the gaps and tell you the truth about them.
The cheapest serious HIPAA program on the market, by a wide margin. Pick the level of hands-on help you want. Both cover the full program.
Thirty minutes, no pressure. We look at where you stand and tell you the truth about it.
Send a note and Chuck gets back to you himself. No pressure, no obligation.
Managed cybersecurity for healthcare is on the way. Leave your name and email and we will tell you the day it opens. No other mail, and you can leave the list any time.