It is difficult for small to medium healthcare providers, practices and business associates to fully grasp all of the nuances of the HIPAA rules and still focus on their primary mission �� patient care and safety. Confused about what the Office for Civil Rights expects in a HIPAA risk analysis and risk management plan? Osprey is offering a free review of your current HIPAA and/or CMS EHR incentive program risk analysis and risk management plan. The review will assess whether it meets the OCR nine-essential elements of a risk analysis according to the HIPAA Security Rule and determine whether the process follows NIST methodologies. I’m offering HIPAA OCR-ready risk analysis, risk management, compliance and advisory services at a fraction of the cost of larger organizations but with the same quality. Osprey is primarily focused on covered entities and business associates who are in the SMB space and budget sensitive. Give us a shot, you have nothing to lose and a lot to gain. “Don’t just do it, do it right!”