I work with a charity org that is not a medical provider, but they have a small department of 3-4 people that helps people sign up for government benefits. The company has a contract in place with the state that covers some of the expenses for this program.
The state deems them a HIPAA business associate. As such, they want to perform a risk assessment. Does anyone have any recommendations for companies that are fair and don't cost an arm and a leg?