Fixed scope · Fixed price
A fixed-scope assessment against the HIPAA Security Rule and NIST CSF, delivered as a written report with prioritized findings, remediation guidance, and the documentation required for audit and insurance purposes.
What's included
Who this fits
Built by someone who ran HIPAA programs inside behavioral health and community health organizations — not a checklist vendor.
How it works
A published price tells you what something costs. It does not tell you whether it is the right thing to buy — and those are different questions.
So the engagement begins with a conversation about what is actually going on, then a written scope covering the specific outcomes, what is included, what is not, the timeline, and who is responsible for what. You see that document before any money changes hands.
Questions
A fixed-scope assessment against the HIPAA Security Rule and NIST CSF, delivered as a written report with prioritized findings, remediation guidance, and the documentation required for audit and insurance purposes.
$6,500 fixed, delivered in 10 business days.
Tyson McKay, who ran HIPAA programs inside behavioral health and community health organizations — not a checklist vendor.
A written report with prioritized findings, remediation guidance, and the documentation required for audit and insurance purposes.
With a conversation about what's actually going on, then a written scope covering outcomes, what's included, what isn't, the timeline, and who's responsible for what. You see that document before anything is committed.
Get started
Tell me what's going on and I'll send back a written scope before anything is committed.