Would your risk analysis survive an OCR review?

Five questions, about a minute. See how exposed you are and what an investigator would likely find first.

HHS's Office for Civil Rights is running a Risk Analysis Initiative, and small organizations are not exempt. In February 2026 a small Illinois treatment provider agreed to pay $103,000 over its HIPAA risk analysis.