Service

HIPAA Readiness Assessment

An assessment of systems that handle protected health information against the HIPAA Security Rule, with a plan to close the gaps.

On this page
  1. When this fits
  2. What the work covers
  3. What you receive
  4. How completion is decided
  5. What you provide
  6. What RJV does not promise
  7. How to start

When this fits

You handle protected health information under US rules and need to know where your safeguards fall short.

What the work covers

  • Inventory of where protected health information is stored and moves.
  • Assessment against the Security Rule's administrative, physical and technical safeguards.
  • A remediation plan with owners.

What you receive

  • The data inventory and assessment.
  • The remediation plan.

How completion is decided

Each safeguard is marked with the evidence reviewed and the assessment is accepted by your compliance owner.

What you provide

  • Access to systems and staff, and your risk analysis if one exists.

What RJV does not promise

  • A fixed price or duration before the scope is known.
  • Regulatory approval or a certificate; the customer remains the regulated party.
  • HIPAA certification, which does not exist, or legal advice.

How to start

Describe the problem on the Work with Us page. Every engagement follows the stages on the engineering page, and the commercial terms explain what determines scope and how the work is charged. Ownership at handover is described in deployment and ownership.

Discuss this service

Tell us the outcome you need, the systems involved and the conditions for acceptance. Agree the scope, responsibilities and price before work begins.

Discuss this service
Published
29 October 2026
Revision
1

Last reviewed 29 October 2026.