Finding the risk is the first half. Showing what happened next is the second.
The analysis identifies the risk. The work doesn’t end there. A useful assessment should leave the practice with documented risks, clear priorities, and a path for addressing what was found.
A report tells you what was found. A usable risk analysis gives you a way to act on it.
Sentinel structures and documents the remediation. Your practice remains responsible for implementing the corrective actions — and now has a place to record that they were.
WHAT YOU RECEIVE — A COMPLETE SECURITY RISK ANALYSIS
- Where ePHI lives, and how it moves
- Systems, threats, and existing safeguards
- Documented risk levels, with the rationale
- Prioritized findings
- A Remediation Register — every finding, an assigned owner, a target date
- A dated written assessment for the practice record
One defined engagement. One usable record.
Sample Security Risk Analysis and Remediation Register
A complete example prepared for a fictional practice — the written analysis and the Remediation Register, exactly as delivered.
View the sample (PDF)A defined project with a defined end.
No subscription. No ongoing commitment. A published price, the same for everyone.
This is a point-in-time Security Risk Analysis. Sentinel documents the risks and provides the Remediation Register; the practice remains responsible for implementing corrective actions. Sentinel does not certify regulatory compliance.
The Security Risk Analysis is required by 45 C.F.R. § 164.308(a)(1)(ii)(A). This engagement follows HHS OCR’s Guidance on Risk Analysis Requirements under the HIPAA Security Rule (July 14, 2010); the Remediation Register implements its corrective-action element.