Browse categories
Explore
Fiverr Pro
English
$
USD
I will review your phi security controls and provide recommendations
Licensed U S Healthcare Attorney HIPAA, PHI and ePHI Risk Specialist
I am Sally S Rock, a licensed U.S. Attorney (Bar #129804) specializing in HIPAA regulatory compliance, health data privacy, and cybersecurity governance. I provide defensible PHI and ePHI risk assessm...
About this Gig
Are your PHI security controls truly legally sufficient, or are they leaving you vulnerable to enforcement penalties? Technical safeguards alone do not satisfy the law; controls must meet precise statutory definitions.
As a licensed U.S. Attorney (Bar #129804), I critically evaluate your existing administrative, technical, and physical safeguards against federal regulatory benchmarks. I identify deficiencies and deliver precise legal recommendations to bring your operational controls into compliance.
What This Gig Covers:
- Administrative Safeguards (workforce security, access authorization, training policies)
- Physical Safeguards (facility access, workstation controls, device handling)
- Technical Safeguards (transmission security, encryption, access controls, audit logs)
- Critical analysis of addressable vs. required specifications
- Clear, attorney-guided recommendations for total legal alignment
Protect your organization from administrative liabilities. Send a message today to review your security controls.
Field of law:
Health & medical
Target country:
Worldwide
Legal consulting Gigs are not screened
Please note that there is no screening process for this service. We recommend that you message the freelancer and check all necessary details before placing your order. Pro freelancers in this category have gone through a vetting process. You can find more details here.
Other Legal Consulting Services I Offer
FAQ
How are the recommendations delivered?
You will receive a clear, structured legal report detailing each evaluated control, its current You will receive a clear, structured legal report detailing each evaluated control, its current compliance status, specific risks, and concrete steps to resolve gaps.
Is this service suitable for third-party Business Associates?
Yes. Business Associates must implement the same Security Rule safeguards as Covered Entities. This review ensures your client contracts and operational controls hold up under scrutiny.
Do you review technical infrastructure directly?
I review your written security configurations, policies, technical safeguards, and vendor commitments against federal legal requirements; I do not execute technical penetration tests.
What documents should I provide for this review?
Relevant documentation includes existing policies, access control protocols, data flow charts, vendor lists, and physical access rules.
What is the difference between "required" and "addressable" specifications?
Required specifications must be implemented as written. Addressable specifications require you to implement the specification, an equivalent alternative, or formally document why it is not reasonable. I review both categories for defensibility.
