HIPAA Compliance Assessments

HIPAA compliance reinforces trust, reduces the risk of penalties from the Office for Civil Rights (OCR), and helps safeguard sensitive health information. AAFCPAs supports organizations that handle protected health information (PHI) through structured, regulator-aligned assessments tailored to their specific risk environment. Whether evaluating your current compliance posture or preparing for future attestation, we provide the clarity, documentation, and practical guidance needed to demonstrate accountability and address regulatory expectations with confidence.

We offer three levels of HIPAA compliance assessments, scaled to your organization’s risk profile and compliance requirements:

• Top 10 HIPAA Assessment – A focused review of the top 10 enforcement actions identified by the OCR.
• Risk-Based Assessment Using the HHS SRA Tool – A comprehensive risk analysis utilizing the current version of the U.S. Department of Health and Human Services Security Risk Assessment (SRA) Tool.
• Full Protocol-Based Evaluation – An in-depth assessment based on the HHS HIPAA Audit Protocol (July 2018 update).

Each engagement includes a structured gap analysis and prioritized remediation recommendations. Optional control effectiveness testing is available for organizations seeking deeper validation of their safeguards or preparing for future attestation requirements.