While all consulting firms will CLAIM to know how to conduct a compliant HIPAA risk analysis, the reality is that VERY few actually do. We know this because our founder was contracted for years by the federal government as an expert in the HIPAA Security Rule to make these determinations. Many covered entities have spent tens of thousands of dollars or more for risk analyses that were rejected by OCR. No risk analysis conducted by Fortenza has EVER been declared insufficient by OCR, so you can rest easy knowing that you’ve truly done your due diligence and selected the right firm.