Assisted Living IT Risk & Compliance Assessment

Assisted Living IT Risk & Compliance Assessment

A comprehensive assessment to evaluate your facility's exposure to operational, cybersecurity, and compliance risks.

Start the Assessment

How it works

Step 1

Answer 11 Questions

Select the option that best matches your current setup. Be honest for the most accurate result.

Step 2

Review Results

Get an instant risk score and recommendations based on your facility's risk profile.

Step 3

Submit Score

Copy your results and submit them below if you would like a specialist to review your risk factors.

Assisted Living IT Risk & Compliance Assessment

This assessment evaluates your Assisted Living Facility's exposure to operational, cybersecurity, and compliance risks. Your final score will range from 0 to 100. A lower score indicates lower risk exposure. A higher score indicates elevated operational and cybersecurity risk that may require immediate attention.

🔶 SECTION 1 – Backup & Disaster Recovery

When was your last full backup restore test?

Within the last 6 months Within the last 12 months Over 12 months ago We have never tested restores

Are backups encrypted and stored offsite?

Yes, encrypted and offsite Offsite but not encrypted Encrypted but stored onsite only Not encrypted and stored onsite

How long would it take to restore critical systems?

Less than 4 hours 4–12 hours 12–24 hours More than 24 hours

🔶 SECTION 2 – HIPAA & Compliance Controls

Do you have documented HIPAA security safeguards?

Fully documented and reviewed annually Documented but not reviewed regularly Informal safeguards only No documented safeguards

Is multi-factor authentication enforced for staff?

Enforced for all users Enforced for some users Planned but not implemented Not implemented

Are access controls role-based?

Yes, fully role-based Partially role-based Basic shared access No structured access control

🔶 SECTION 3 – Operational Continuity

If your primary IT systems went down today, how would your facility operate for the next 72 hours?

We have a documented and tested plan, and staff know exactly what to do. We have a written plan, but it has not been tested recently. We have some informal processes, but no formal plan. We would likely have to figure it out in real time.

Are emergency IT contacts documented and accessible?

Yes, documented and tested Documented but untested Known but undocumented No defined escalation plan

🔶 SECTION 4 – Cybersecurity & Phishing

Is advanced email filtering in place?

Advanced filtering + monitoring Standard filtering only Basic spam filtering No structured filtering

Are phishing simulations conducted?

Quarterly simulations Annual simulations Occasional training only No phishing training

Is endpoint protection actively monitored?

24/7 monitored protection Managed antivirus only Basic antivirus No centralized monitoring

Your Assisted Living Risk Score: 0%

Low Risk

Risk Assessment:

Your facility has strong controls in place with minimal risk exposure.

Send your score for a review

If you would like a specialist to review your results, submit your score and contact details.

Paste your results from the assessment into the form field titled "Assessment Results".