2. Risk Assessment

2. Risk Assessment

Watch the Risk Assessment: How To Video to learn more!


Once an Officer has passed their final exam with a 70% or higher score, the Risk Assessment will be automatically released. The Risk Assessment will be available on the blue left side menu bar. Only HIPAA Prime Officers will have access to the Risk Assessment. We recommend that you have IT available to answer the security questions. 


When taking the Risk Assessment, complete the “Start Here” folder first. The answers you input into these three forms will populate the rest of the Risk Assessment so you only answer questions that apply to your unique business case. 


If you need help from your team answering certain questions or sections, you can assign questions and/or sections to other Officers who have completed their HIPAA training. To assign a question or section to another Officer, click on the blue text “Assign Question” to the right of the question or the “Assign Section” blue text on the far right of the form. 


You can save and continue at any point by clicking on the “Save and continue later” button at the top right of each form.


After you complete a form, click on the Submit button and your progress bar for the entire Risk Assessment will adjust accordingly. 


The Submit button on the form does not lock you out of your answers if you need to update something as you complete the rest of the Assessment. 

To submit the entire Assessment for Total HIPAA to review, click on the “Submit Risk Assessment” button on the Risk Assessment menu page. 


Once you click submit, our HIPAA Compliance Team will be notified. You will be notified when the Risk Assessment Report is ready for your review.


    • Related Articles

    • 3. Risk Assessment Report Review

      We are updating this information to match our new application, come back soon!
    • Annual Review

      Total HIPAA will reach out to you once a year to review your Risk Assessment Report. From year one to year two, there may be some significant updates. That is to be expected, and why you hired us to help! Our team will review any changes you give us, ...
    • 6. Final Document Set

      Once you have finalized your HIPAA Privacy and Security P&P, our team creates your final document set. This will include all documents delegated to Total HIPAA in your Risk Assessment Report and those mentioned throughout the Privacy, and Security ...
    • Frequently Ask Questions

      What is PHI? PHI stands for Protected Health Information (PHI). To be considered PHI both, 1. health information. (e.g., diagnosis, diagnosis code, etc), and any identifying personally identifying information(e.g., IP address, email address, physical ...
    • Implementation of HIPAA Compliance

      Once you have your compliance documents, it is time for you to begin implementing your Compliance Plan. We recommend you look at the Gap Analysis from your Risk Assessment report, and call a meeting with your compliance team to start the ...