PRACTICE PROTECTION ASSESSMENT

A straightforward security review for solo and small practice therapists who want to know they're protected—without the jargon or anxiety.

The Problem

You didn't go into this field to become an IT expert. But somehow you're expected to know whether your telehealth platform is actually HIPAA-compliant, whether your laptop is secure enough, and what would happen if a client's information was ever exposed.

Most therapists handle this by hoping for the best—or by losing sleep over it.

There's a better way.

What the Practice Protection Assessment Is

This is a focused, practical review of your practice's security posture—designed specifically for mental health professionals in solo or small group practice. No enterprise IT frameworks. No 50-page compliance reports. Just clarity on where you stand and what to do about it.

Here's how it works:

Step 1: Security Questionnaire — You'll complete a brief, therapist-specific questionnaire covering your telehealth setup, devices, software, and workflows. Takes about 10 minutes. No trick questions.

Step 2: Review Session — We'll meet for 45 minutes on Zoom to walk through your answers together. I'll ask clarifying questions, explain what the risks actually mean in plain English, and identify your biggest vulnerabilities.

Step 3: Your Security Snapshot — Within a few days, you'll receive a written report with clear red/yellow/green ratings across six key areas, plus a prioritized list of what to fix first—with specific, actionable steps.

Step 4: Follow-Up Support — You'll have 30 days of email access to ask questions as you implement the recommendations.

What You'll Walk Away With

  • Confidence that your telehealth platform, EHR, and devices are set up correctly—or a clear plan to fix them

  • Knowledge of your single biggest vulnerability (every practice has one)

  • A concrete, prioritized action plan you can implement yourself or hand to an IT person

  • Documentation showing you've done your due diligence—valuable if you're ever audited or questioned by a licensing board

  • Peace of mind that comes from actually knowing where you stand

Who This Is For

The Practice Protection Assessment is designed for licensed mental health professionals—psychologists, LPCs, LMFTs, LCSWs, and clinical social workers—who:

  • Run a solo practice or small group practice (1-5 clinicians)

  • Offer telehealth services, either exclusively or alongside in-person sessions

  • Know they should be doing more to protect client data but aren't sure where to start

  • Want expert guidance without being sold unnecessary technology or ongoing contracts

Investment

$299

This includes the security questionnaire, 45-minute consultation, written Security Snapshot report, and 30 days of follow-up email support. Payment will be collected alongside scheduling the consultation.

Need Help Implementing the Fixes?

The Practice Protection Assessment gives you a clear roadmap—but you don't have to walk it alone.

If your assessment reveals issues that feel too technical, too time-consuming, or just not how you want to spend your energy, I offer hands-on implementation support. This means I'll actually do the work: configuring your telehealth platform, securing your devices, setting up proper backup systems, drafting your security policies—whatever needs to happen.

Implementation engagements are scoped and priced based on what you actually need. No retainers, no ongoing fees. We identify the gaps, I fix them, and you move on with confidence.

Think of the assessment as the diagnosis. Implementation is the treatment—available if you need it, completely optional if you don't.

About Your Advisor

I'm Elliott Friedman, and I've spent 20 years working at the intersection of healthcare, technology, and compliance. My first independent consulting client was a mental health practice in Charleston, and I've been helping therapists, psychologists, and counselors navigate the business and technology side of private practice ever since.

I've presented on AI ethics to the South Carolina Psychological Association, been featured on clinical podcasts discussing technology in mental health practice, and I understand both the regulatory environment you operate in and the practical realities of running a small practice.

I don't sell software. I don't push ongoing contracts. I help you understand where you stand and what to do about it—then I get out of your way.

Ready to Get Started?

Schedule your Practice Protection Assessment today. You'll receive a link to the security questionnaire in your confirmation email immediately after booking, and we'll meet at the day and time you selected to review your results together. Click the button below to pick your day and time and submit payment to secure the consultation.

Not ready to pay and book now? Schedule a brief call with Elliott to discuss further.

Schedule Your Assessment

Common Questions

I'm not very technical. Will I understand this?

Yes. Everything is explained in plain English. If I use a technical term, I'll translate it. The goal is clarity, not confusion.

What if the assessment reveals major problems?

Then you'll know about them—which is better than not knowing. Most issues I find are straightforward to fix, and your Security Snapshot will include clear steps you can take on your own. But if something feels too technical or you'd rather have someone handle it for you, I offer full implementation support as a separate engagement. I can configure your systems, set up your security tools, and make sure everything is done correctly—so you can focus on your clients, not your technology.

Is this a full HIPAA audit?

No—this is a focused security review, not a comprehensive compliance audit. It covers the areas where solo practitioners are most vulnerable: telehealth, devices, software, and basic administrative safeguards. For most small practices, this is exactly what you need. If a full audit is warranted, I'll tell you.

Can I use the report for insurance or licensing purposes?

The Practice Protection Assessment report documents that you've conducted a security review of your practice—which demonstrates due diligence. It's not a certification, but it is documentation that you've taken reasonable steps to assess and address your risks.

What if I just started my practice?

Even better. It's easier to build good habits from the start than to fix problems later. The assessment will help you set up your practice correctly from day one.

←Return Home