HIPAA-ready in 30 days. No full-time CISO required.
I am Andrew Trainum. I deliver fixed-price HIPAA risk analyses, monthly office hours, hourly security advice, and ongoing CISO and CTO leadership, personally and fully remote.
No pitch deck. If I am not the right fit, I will tell you.
Published prices. No scoping games.
Pay 50% to start. Every offer begins with a free call to confirm fit.
HIPAA Security Risk Analysis
- Risk analysis report
- Risk register
- Prioritized remediation plan
- Policy gap list
- 60-min findings call
Advisory vCISO / CTO
- Monthly leadership session
- Policy and vendor reviews
- Questionnaire support
Office Hours
- Monthly working session
- Policy and vendor reviews
- Questionnaire help
- Hours reset monthly
Hourly Advisory
- Security and tech questions
- Vendor and contract review
- Architecture second opinion
- No retainer
Bring me the thing keeping you up at night.
An audit or risk analysis is due
Get a defensible HIPAA risk analysis and a plan you can actually finish.
A security questionnaire is blocking a deal
I answer it with you and build a reusable answer library for the next one.
Breach and ransomware risk
Close the most likely attack paths first, in priority order.
No one owns technology
Fractional CTO judgment on architecture, vendors, and hires.
From call to clarity in four steps.
Free call
30 minutes to understand your situation.
Scope and pay
A one-page scope and a payment link.
The work
Remote, async-friendly, on a fixed timeline.
Findings call
Every finding explained, next steps agreed.
You hire me. You get me.
Twenty years in information security across healthcare, government, and enterprise environments. I work with a small number of clients at a time so each one gets senior attention.
Remote and available worldwide, with US healthcare as my home turf.
From the blog.
Plain-English guides on HIPAA, security leadership, and technology decisions.
A security-first fractional CTO: building it right before customers ask
Early technical decisions decide how painful your first security review will be. A security-first fractional CTO helps you choose…
Fractional CISO for a small business: what you get, and what it costs
A full-time CISO is out of reach for most small companies. A fractional CISO gives you one experienced security lead for a set number of…
What a fixed-price HIPAA risk analysis for a small practice should include
A HIPAA risk analysis does not need a six month project. Here is what a small practice should get, what it should cost, and how I deliver…
Need a team, technical testing, or managed IT?
That is Dark Edge Consulting, my firm. Same standards, with a team and a service level behind them.
Managed IT, security and compliance
Want the fixes done for you? Dark Edge runs your security and compliance per seat, every day.
vCISO and vCTO retainers
More than office hours? Dark Edge offers vCISO and vCTO retainers with a team and a service level.
Penetration testing
My risk analysis is policy and process only. Dark Edge does technical testing.
FFIEC, CMMC readiness, or SOC 2?
Dark Edge handles exam and assessment readiness for organizations it does not manage. CMMC certification itself is done by an authorized C3PAO.
Common questions.
Is a risk analysis required under HIPAA?
Yes. The HIPAA Security Rule requires covered entities and business associates to conduct an accurate and thorough risk analysis and to keep it current.
Do you work outside the US?
Yes. All work is remote, and I take clients worldwide.
What do you need from my staff?
A short kickoff, access to your existing policies and system list, and a few interviews. I keep the time ask small.
Does the risk analysis include technical testing?
No. It covers policy, process, and safeguards. If you need technical testing, we will talk about it on the call.
What happens after the risk analysis?
You keep the report and the plan. Many clients continue with office hours or hourly advisory. Teams that want the fixes done for them move to Dark Edge Consulting. There is no obligation.
Let’s fix it.
Free 30-minute call. Honest answer on fit, scope, and price.
Book a free 30-min call