SecureTrust
Products
Solutions
Resources
Company
Pricing
Talk to an Expert

Managed cybersecurity for healthcare practices

Protect your practice. Know where your HIPAA security gaps are.

Get engineer-led cybersecurity with a HIPAA Security Rule gap assessment and prioritized remediation plan included in your qualifying service agreement.

HIPAA gap assessment included with your qualifying SecureTrust Practice Protection service agreement.

  • Managed protection for covered systems.
  • Clear findings and practical next steps.
  • Security expertise to help your practice move forward.

Tell us a little about your practice. We'll review your needs and prepare a tailored quote.

Remediation plan Illustrative remediation plan
PriorityFindingNext stepOwner
HighFormer staff accounts still activeDisable and set an offboarding checkSecureTrust
HighBackups never test-restoredRun and document a restore testSecureTrust + practice
MediumNo written device-loss procedureAdopt a short procedurePractice manager

Example findings for illustration. Priorities are not a diagnosis of any practice.

Your practice needs more than another security checklist.

Are the safeguards actually in place?

Policies say one thing. Nobody has checked whether the computers, accounts and backups match.

Who is supposed to fix it?

Between your IT company, your staff and your software vendors, it is not always clear who owns each security task.

When would anyone have time?

Gathering evidence and following through competes with patients, scheduling and staffing.

SecureTrust Practice Protection answers all three: we protect your systems, show you where the gaps are, and agree who closes each one.

SecureTrust Practice Protection

One managed service. A clearer path from security gaps to action.

One agreement covers protection, the assessment, a plan you can act on, and the people who help you act on it.

  1. Managed cybersecurity

    We deploy, configure and operate the security services in your agreement, then watch for and investigate the issues that need attention.

    Selected from our platform, such as cloud firewall, zero trust access, data loss prevention, SIEM and managed patching.

  2. HIPAA Security Rule gap assessment

    We review the agreed safeguards and document where your practice falls short of the scoped requirements.

    Administrative, physical and technical safeguards, within the scope set in your agreement.

  3. Prioritized remediation plan

    Every gap gets a priority, a suggested next step and an owner, so you know what to do first and who is doing it.

    Technical fixes in your agreement are ours. Policy decisions and out-of-scope work are assigned to a named owner.

  4. Expert guidance

    A security engineer walks you through the findings, answers questions in plain language and coordinates with your IT provider.

    Review meetings and escalation contacts are set in your agreement.

  5. ClinicProof evidence tracking

    ClinicProof keeps checking a defined set of HIPAA Security Rule controls and records each dated result, so remediation progress and evidence stay organized.

    Results show which controls are verified and which need attention.

The gap assessment is included with a qualifying SecureTrust Practice Protection service agreement. Advanced or additional services, such as policy writing or work outside your agreement, are quoted separately.

See what needs attention—and what to do next.

We review your administrative, physical and technical safeguards within the agreed scope. You receive:

  • Documented findings, written for practice owners and office managers
  • A priority for each gap, so the important work happens first
  • A remediation roadmap with a suggested next step and owner for every item
  • A results review with the engineer who did the work

A gap assessment supports your security program. On its own, it is not a complete HIPAA risk analysis or a guarantee of compliance.

Remediation plan Illustrative example
PriorityFindingNext stepOwner
HighFormer staff accounts still activeDisable and set an offboarding checkSecureTrust
HighBackups never test-restoredRun and document a restore testSecureTrust + practice
MediumNo written device-loss procedureAdopt a short procedurePractice manager

Example findings for illustration. Priorities are not a diagnosis of any practice.

A quote built around your practice.

Your quote depends on:

  • How many users and devices need protection
  • How many locations you operate
  • Which security services you select

Included in your agreement

HIPAA Security Rule gap assessment and prioritized remediation plan, plus ClinicProof evidence tracking.

A quote request is not a purchase or a commitment.

Get My Practice's Price
Richard Selvidge, founder of SecureTrust Cyber

Know who is helping protect your practice.

SecureTrust Practice Protection is led by Richard Selvidge, CISSP, ITIL, founder of SecureTrust Cyber. Richard has spent more than 25 years securing networks and systems, including classified programs for the U.S. Department of Defense.

He founded SecureTrust Cyber to give independent practices the same disciplined security work, explained in plain language. When you have a question about a finding, you talk to an engineer who understands it.

More about Richard and SecureTrust Cyber

Getting started is three steps.

  1. 1

    Scope your practice

    We identify the users, devices, locations and systems to cover, and how your current IT arrangements work.

  2. 2

    Deploy and assess

    We coordinate the agreed security deployment and gather the information the gap assessment needs.

  3. 3

    Review and act

    We explain the findings, agree who owns each item, and manage the contracted services from there.

What we need from you: one practice contact, help coordinating access, and the documents or answers we ask for along the way.

FAQ

Questions practices ask before getting a price

We already have an IT provider. Why would we need this?
Many IT providers keep systems running but do not assess HIPAA safeguards or manage security services. We agree with you, and with your provider, who is responsible for what. How we work alongside them is part of scoping.
What exactly is included in the gap assessment?
A review of the administrative, physical and technical safeguards in your agreed scope, documented findings, a prioritized remediation plan, and a review of the results with you.
Is the assessment included, or is there a separate fee?
It is included with a qualifying SecureTrust Practice Protection service agreement. Your quote shows exactly what is covered.
Does this make our practice HIPAA compliant?
No service can promise that. Compliance depends on your policies, training and decisions as well as your technology. We help you find and close security gaps and keep the evidence organized.
Is a gap assessment the same as a HIPAA security risk analysis?
No. A gap assessment compares your safeguards with scoped requirements. A risk analysis also evaluates threats and the likelihood and impact of each risk. The assessment gives your risk analysis useful input.
Who fixes the issues identified?
Technical work covered by your agreement is handled by our team. Items such as policy decisions, staff matters or work outside the agreement are assigned to a named owner, and we can quote additional help if you want it.
How much time will our office need to spend?
Mostly a practice contact who can coordinate access, answer questions and attend the results review. We schedule work around patient care where we can.
What affects the price and agreement terms?
The number of users and devices covered, your locations, and the services you choose. Agreement length and any setup work are set out in your quote.
Is this appropriate for a small practice?
Yes. It is built for independent dental, medical and behavioral health practices that do not have security staff of their own.
How does ClinicProof fit in?
ClinicProof is our control verification service. After the assessment, it keeps checking a defined set of HIPAA Security Rule controls and records dated results, so you can see remediation progress and have evidence organized when someone asks for it.

Get a clear price and a practical next step.

Tell us about your practice. We'll review the systems you need protected, explain the included gap assessment, and prepare a quote for the agreed services.

Please do not include patient information.