My CISO Partner HIPAA Diagnostic
Self-assessment
A diagnostic from My CISO Partner

How ready are you for HIPAA?

A structured readiness assessment across the eight domains that determine whether your organization protects PHI the way HIPAA requires — the Security Rule safeguards, organizational and documentation requirements, the Privacy Rule, and Breach Notification. You'll get a readiness score, a domain breakdown, and your most material gaps in plain language.

Free to run in about 20 minutes — no account needed.
8
HIPAA domains
40
evidence-based questions
0–5
maturity scale per domain
25 yrs
enterprise risk behind it

The maturity scale

Every question is scored on the same five-level scale. Answer for how things actually operate today — not the policy on paper. Score the reality, not the intent.

The eight domains

Mapped to the HIPAA Security, Privacy & Breach rules (45 CFR Part 164)
Domain 1 of 6

Your results are ready

You've scored all six domains. Enter your email to unlock your maturity score, the domain-by-domain breakdown, and your most material gaps — we'll send a copy to keep.

Your results, plus the occasional note about the toolkit — nothing else, and never shared.
0.0
of 5.0
—

Your HIPAA readiness

Maturity by domain

Where you're strongest — and where the programme is thin.

Domain scores

Averaged across the questions in each domain.

Your most material gaps

The lowest-scoring domains, framed as findings you could take to leadership.

Standards alignment

This assessment maps to the HIPAA Security, Privacy, and Breach Notification rules. A high-level readiness view — the full control detail lives in the Controls Matrix. Not legal advice; validate against 45 CFR Part 164 and your counsel.

This is the diagnostic. The toolkit is the fix.

The full HIPAA Compliance Toolkit turns this snapshot into a defensible assessment, a prioritised roadmap, and board-ready deliverables — with expert review available when you want it.

See the toolkit