NBT Systems compliance programs home Book a call

Compliance programs that start free and scale with you.

Guided HIPAA and CMMC programs for small healthcare practices and defense contractors. Begin with a free questionnaire, add expert documentation, or let NBT Systems guide the whole engagement.

Choose your program

Each program starts with a free guided questionnaire. Step up to professional documentation or a fully guided engagement whenever you’re ready, without redoing your answers.

Healthcare

HIPAA

For medical, dental, behavioral health and other practices that handle electronic patient information.

  • Security Risk Assessment: the annual risk analysis the Security Rule requires, from free to fully guided
  • Security Program Build: tailored policies and documentation for new practices or programs that need retooling
Defense contractors

CMMC

For companies in the defense supply chain that handle Federal Contract Information or Controlled Unclassified Information.

  • Level 1 Program Build: the 15 basic safeguarding requirements, your System Security Plan and SPRS affirmation support
  • Level 2 and Level 2 annual review: coming soon

Every program works the same way

Pick the level of help that fits your budget and timeline. Fees for documentation are credited toward a guided engagement if you upgrade within 60 days.

  1. Free guided questionnaire

    Work through plain-language questions at your own pace and get instant self-generated reports. Your answers stay in your browser.

  2. NBT Systems report or documentation

    Send us your progress file. An NBT Systems security professional reviews your answers, prepares your report or documents, and walks you through them on a 20-minute call.

  3. NBT Systems-guided engagement

    We run the process with your team remotely, validate what’s in place, and deliver the finished, professionally documented result.

Why work with NBT Systems

Security operations, not just paperwork

We’re a cybersecurity firm. When an assessment finds gaps in MFA, backups, endpoint protection or email security, we can help fix them, not just list them.

Built for small organizations

Transparent pricing, plain language and fully remote delivery, sized for practices and contractors without an IT department.

Start free, pay only for expertise

The questionnaires are free. You pay when you want an expert’s review, tailored documents, or a guided engagement.

Questions

Which program do I need?

Healthcare practices that handle electronic patient information fall under the HIPAA Security Rule. Companies that hold or work on Department of Defense contracts need CMMC: Level 1 if they handle only Federal Contract Information, Level 2 if they handle Controlled Unclassified Information. If you’re unsure, book a short call and we’ll point you in the right direction.

Do I have to create an account?

No. The free questionnaires run in your browser and save your answers there. You can save a progress file to continue later or send it to us.

Is everything delivered remotely?

Yes. Questionnaires are online, documentation is delivered by email, and guided engagements use video sessions and secure document exchange.

Does completing a program make us compliant?

No questionnaire or document set guarantees compliance on its own. Compliance comes from putting the safeguards in place, following your policies, and reviewing them over time. Our programs give you the documentation and the plan to get there.

Not sure where to start?

A 20-minute call is enough to find the right program.

Book a callEmail us