Your First 45 Days: An Incident Response Playbook for Arizona Healthcare
A dual track playbook for the days after a suspected breach at an Arizona practice, covering both HIPAA and state obligations without missing either clock.
-
-
Arizona’s 45 Day Breach Notification Rule: What Medical Practices Need to Know
Arizona requires notification within 45 days, tighter than HIPAA’s 60. What the state law says, when the Attorney General gets involved, and how it interacts with federal rules.
-
How to Actually Run a HIPAA Risk Analysis: A Step by Step Guide for Arizona Practices
A practical sequence for running a HIPAA security risk analysis in a small or mid sized practice, from inventory to remediation plan.
-
The HIPAA Security Risk Analysis: The One Thing OCR Keeps Finding Missing
Why the risk analysis is the requirement that shows up in nearly every OCR settlement, what it actually has to contain, and how to tell if yours counts.
-
CMMC Level 1 vs Level 2 in 2026: What Each One Requires Now
The difference between CMMC Level 1 and Level 2, updated for self assessment, and how to work out which one your contracts actually require.
-
Do Arizona Contractors Still Need a C3PAO? Short Answer, Not Until 2028.
Third party CMMC assessment is suspended through November 2028. What that means if you were planning to hire a C3PAO, and what to do with the budget instead.
-
CMMC Phase 2 Is Suspended and Now It’s Binding. What Arizona Contractors Should Do.
The September 3 class deviation turned the CMMC suspension into regulation through November 2028. Here is what changed, what did not, and what to do next.
-
Building Your CMMC System Security Plan Without Producing a Doorstop
What a system security plan has to contain, why most are too long to be useful, and how to write one that survives contact with your actual business.
-
How to Improve Your SPRS Score, in the Order That Actually Moves the Number
A practical sequence for raising an SPRS score, starting with the five point controls, and what to do about the ones you cannot fix quickly.
-
SPRS Scores Explained: What the Number Means and Why It Now Carries Legal Weight
How the SPRS score is calculated, what a negative score actually indicates, and why self attestation made an inaccurate number more dangerous, not less.