Security & compliance programs
Security programs that hold up to scrutiny.
Compliance Rehab builds and rebuilds security and compliance programs for organizations facing serious oversight: federal frameworks, defense contracts and regulated healthcare. We design the program, stand it up, and leave it running with evidence behind every control.
Programs
Where we come in
Fractional CISO
Security leadership without the full-time hire: strategy, policy, risk decisions, and a named executive for your board, customers and auditors.
Starts at $5,000/mo
CMMC readiness
Scoping, gap assessment, system security plan and remediation roadmap for defense contractors preparing for CMMC Level 2.
Starts at $15,000
Zero trust assessment
Where you stand across identity, devices, networks and data, and a sequenced roadmap — built to the standards large federal health programs use.
Starts at $12,000
FedRAMP & 20x readiness
Readiness for FedRAMP, including the 20x approach of automated, machine-readable evidence and continuous validation.
Starts at $25,000
Security program builds
Standing up or rehabilitating a full security program — governance, controls, monitoring and evidence — scoped to your organization.
Custom · Start a conversation
Hiring a full-time CISO typically costs $250K+ a year before tools. Final pricing depends on scope; every engagement starts with a scoping call.
Experience
Led by Griffin Brown
Defense Health Agency
Stood up the DHA’s zero trust security program (2024–25).
Beth Israel Lahey Health
Security work for a Harvard teaching hospital.
Healthcare operator
Founded and grew Therapitas, a therapy practice in Oklahoma, and has served as security officer for One Therapy Network and its clinics.
Our brand for small healthcare
HIPAA Made Simple
For small healthcare and the companies that serve it: a named HIPAA security officer, monthly evidence-backed reviews, vendor risk management and trust sites.
Installing our software?
If you saw Compliance.Rehab LLC as the developer while installing the HIPAA Made Simple agent on a Mac, that’s us. Your organization or HIPAA Made Simple sent you the installer. Questions? Email griff@hipaa.inc before continuing.
Contact
Let’s talk about your program.
Compliance Rehab LLC · Dallas–Fort Worth, Texas · griff@hipaa.inc