# HIPAA Security & Privacy

> United States

Organizations handling US protected health information (PHI) must meet HIPAA's Security and Privacy Rules. We assess safeguards - administrative, physical and technical - and help close gaps with documented controls.

## Who needs to comply

Healthcare providers, plans and business associates handling US PHI.

## Key requirements

- **Safeguards review** - Administrative, physical and technical safeguard assessment.
- **Risk analysis** - HIPAA-required security risk analysis and management.
- **Documentation** - Policies and evidence for audit and breach defensibility.

---
Related services: https://a5cyber.com/services/compliance-advisory/, https://a5cyber.com/services/risk-assessment/, https://a5cyber.com/services/iso-27001-readiness/