Fortress Cyber Advisors

HIPAA + ABA Controls Assessment Worksheet

Section	Specification	Plain Language	Why It Matters	Owner’s Ongoing Responsibility	ABA Ethics	Best Practices	Status	Client Upload	Admin Upload	Decision / Notes

Cybersecurity Pre-Assessment Questionnaire

Contact & Firm Information

Firm Name Point of Contact Name Title / Position Email Phone Number

1. Firm Overview

Number of Attorneys Total Staff Number of Remote/Hybrid Workers Primary Practice Areas / Case Types

2. Data & Compliance

Do you handle Protected Health Information (PHI) or medical records? Other sensitive data handled (SSNs, financial information, settlement details, etc.) Any past security incidents, ransomware attempts, or suspicious events? If yes, brief description

3. Technology Environment

Primary case management system (Clio, MyCase, Filevine, etc.) Email platform Cloud storage / file sharing tools used All devices are company-owned laptops? How does remote staff access firm data?

4. Security Practices

Is Multi-Factor Authentication (MFA) used? Current backup solution and frequency Security tools in use (antivirus, firewall, etc.) Any written cybersecurity policies? Security awareness training for staff?

5. Goals & Concerns

What are your biggest cybersecurity concerns right now? What would you like to achieve from this assessment? Any timeline, budget, or other constraints?

FORTRESS CYBER ADVISORS

HIPAA + ABA Controls Assessment Worksheet

Cybersecurity Pre-Assessment Questionnaire

Contact & Firm Information

1. Firm Overview

2. Data & Compliance

3. Technology Environment

4. Security Practices

5. Goals & Concerns

✅ Submission Successful

FORTRESS CYBER ADVISORS

Administrator Access

HIPAA + ABA Controls Assessment Worksheet

Client Pre-Assessment

Cybersecurity Pre-Assessment Questionnaire

Contact & Firm Information

1. Firm Overview

2. Data & Compliance

3. Technology Environment

4. Security Practices

5. Goals & Concerns

✅ Submission Successful