Free scorecard
Discover your cybersecurity and HIPAA readiness gaps
Complete this free 20-point scorecard to identify common gaps involving passwords, employee access, devices, backups, vendors, policies, incident response, and HIPAA safeguards.
The free 20-point scorecard
Twenty plain-English questions across eight areas. You’ll see your score immediately — no email address required.
This scorecard is provided for general educational and cybersecurity readiness purposes only. It is not legal advice, does not constitute a formal HIPAA Security Rule risk analysis, does not determine HIPAA compliance, and does not guarantee protection against a security incident.
Who the scorecard is for
- Small businesses without dedicated security staff
- Counseling and therapy practices
- Behavioral-health organizations
- Dental and medical practices
- Home healthcare organizations
- Other small organizations handling sensitive information
What the scorecard reviews
- Account and access security
- Password security
- Device security
- Email and phishing
- Data protection
- Remote work
- HIPAA and vendor risk
- Policies and incident response
How it works
- 01
Answer 20 plain-English questions
Eight short steps, one category at a time. No jargon and nothing to install.
- 02
Receive your readiness score immediately
Your score out of 40 appears as soon as you finish — no email address required.
- 03
Review your priority areas
See up to three areas that may deserve attention first, and decide what to address.
Prefer paper?
The same 20 points are available as a branded, printable PDF checklist you can share with your team. You do not need to complete both versions.
- · 6 pages, 8 categories, 20 questions
- · Space to record Yes / Partially / No / Not sure
- · Scoring guide and next steps included
- U.S. Air Force veteran-owned
- NIST-aligned guidance
- HIPAA-focused
- Built for small organizations
- Plain-English recommendations
Frequently asked questions
This scorecard is provided for general educational and cybersecurity readiness purposes only. It is not legal advice, does not constitute a formal HIPAA Security Rule risk analysis, does not determine HIPAA compliance, and does not guarantee protection against a security incident.
Already know some answers are “not sure”?
Book a free 20-minute Checklist Score Review. Bring your score and the questions you marked No, Partially, or Not Sure, and we’ll help you decide what deserves attention first.