- Understand why you need a HIPAA assessment
- Identify any Protected Health Information (PHI) stored in your systems
- Craft the necessary policies and identify controls to protect and keep PHI private
- Implement your controls and collect evidence to prove compliance