HIPAA Business Associate Agreement (BAA): A Guide
A HIPAA BAA is required whenever a vendor handles protected health information for you. Here is what a…
Read More
HIPAA Compliance Checklist for Vendors & Small Practices
A practical HIPAA compliance checklist, organised by the Privacy and Security Rules, breach notification, and business associates -…
Read More
How to Conduct a HIPAA Risk Assessment
The HIPAA risk assessment is the foundation of the Security Rule. Here is what it is, why it…
Read More
HIPAA Security Rule vs Privacy Rule Explained
HIPAA Security Rule vs Privacy Rule: one protects electronic health data, the other governs its use and disclosure.…
Read More
HIPAA Required Policies & Documentation Checklist
HIPAA requires documented policies and procedures. Here are the essential HIPAA policies, the records you must keep, and…
Read More
SOC 2 Cost & Timeline: What to Expect
What does SOC 2 cost and how long does it take? Here are the main cost factors, the…
Read More
How to Prepare for a SOC 2 Audit
The SOC 2 audit tests your controls independently. Here is what it involves, the process, how to prepare,…
Read More
SOC 2 Policies & Documentation Checklist
SOC 2 documentation turns security practice into an auditable report. Here are the essential policies, the evidence you…
Read More
SOC 2 Type 1 vs Type 2: What’s the Difference?
SOC 2 Type 1 vs Type 2: one tests control design at a point in time, the other…
Read More
SOC 2 Trust Services Criteria Explained
The SOC 2 Trust Services Criteria define what your auditor evaluates. Here are all five - security, availability,…
Read More
How to Run a GDPR Gap Analysis
A GDPR gap analysis shows exactly where you stand against the regulation. Here is a step-by-step method to…
Read More
GDPR Data Subject Rights Explained
The GDPR data subject rights put individuals in control of their data. Here are all eight rights, how…
Read More