Three jobs, three prices, all printed right here. Most security shops hide the fee behind a “discovery call” and bill by the hour until you flinch. We quote in writing the same day you call, and the invoice matches the quote. That’s the whole trick.
Each crossing is its own engagement with its own invoice. Take one, or stack them.
The risk analysis the Security Rule demands and the first thing an auditor asks to see. We inventory it, walk it, rank it, and write it up so you can file it.
Your front desk gets fooled by a safe email so a real one doesn’t land. No annual slideshow, no name-and-shame.
A finding nobody fixes is just a liability with a date on it. This is the chart that gets the fixes done.
You don’t need all three. If the last risk analysis is under a year old, skip A. If the clinic runs on one front-desk PC and a prayer, start with B this month.
| If this is you | Start with | Fee |
|---|---|---|
| No risk analysis, or one older than a year | Assessment | $3,480 |
| Staff clicked something odd last quarter | Training | $1,260 |
| You have findings but no plan or owner | Roadmap | $2,140 |
| New practice, or an acquisition just closed | All three | $6,350 |
| Not sure which row you are? | Ring (212) 717-1726 | |
Book the full crossing together and we quote the bundle in writing the same day. The roadmap is built from the assessment we just finished, so nothing is explained twice.
A consultant who sells everything is selling something. Here are the lines we hold.
We resell nothing. When the roadmap says you need a backup service, the price beside it is the vendor’s, not ours with a markup.
We look at how systems are set up. We don’t open patient records, and we don’t change a setting on your machines.
Nobody honest can promise an audit outcome. We promise a current, documented analysis, a trained front desk and a dated plan.
Once per engagement, at the price we quoted in writing. Pay by ACH, check or card. There’s no deposit meter and no retainer to cancel.
The training fee covers up to 25. Larger practices get a quote for the extra seats, in writing, before we book a date.
Only if you already hold a current risk analysis we can build from. Otherwise the roadmap would be guessing, and we don’t bill for guessing.
We tell you on the 20-minute call, not after the walk. If something genuinely new turns up mid-engagement, you hear about it first and the fee doesn’t move without your yes.
