Steve K.

Healthcare organizations face serious HIPAA penalties — not because they're negligent, but because most never see the gaps until it's too late. As a CISSP-certified security professional and practicing CISO with 10+ years of experience, I specialize in helping healthcare providers, dental practices, telehealth platforms, and healthcare SaaS companies achieve — and maintain — HIPAA compliance. What I help clients with: HIPAA Security Risk Assessments Policy & Procedure Development (Privacy, Security & Breach Notification) Business Associate Agreement (BAA) drafting & review HIPAA Compliance Gap Analysis with prioritized remediation roadmap Staff Training Documentation & Awareness Programs Who I work with: Solo practices, telehealth startups, and SaaS platforms — if HIPAA touches your business, I can help. Why clients trust me: I'm not a compliance consultant who learned HIPAA from a checklist. I come from a cybersecurity leadership role — I've built security programs from the ground up. That means that when I help you with policies and documentation, I actually understand what's behind them and why they matter. HIPAA compliance isn't something I just consult on — it's what I deal with every day as a practicing CISO. If you have questions or aren't sure where to start, just message me. I'm happy to point you in the right direction.