Assessor profile

LBMC

LBMC is a top-50 professional services firm with a large healthcare practice, offering HIPAA risk assessments, security program consulting, and SOC examinations. Its healthcare depth plus full-service advisory bench suits provider organizations that need assessment and program-building under one roof — kept properly separated.

Firm typeTop-50 advisory and CPA firm; healthcare practice
HeadquartersBrentwood, Tennessee
Fee bandNot published — request a scoped quote
FrameworksHIPAA, HITRUST, SOC 1, SOC 2
Website verifiedHTTP 200 · 2026-09-24
Official sitewww.lbmc.com
Best for

Regional health systems and large physician groups that want a full-service firm with a real healthcare practice.

Watch for

A large advisory firm — confirm the HIPAA assessment team's healthcare focus, not just the firm's.

What to ask LBMC

  1. Who is my named assessment team, and what's their healthcare experience?
  2. What's your committed fieldwork window this quarter?
  3. Fixed fee or variable — and exactly what breaks the fixed fee?
  4. How do you price remediation support, separately from the assessment?
  5. Can I talk to two reference clients my size?
Assessment independence. Ask whether this firm also sells implementation services for the gaps it would assess — and get the independence answer in writing.

Frequently asked

How much does LBMC charge for a HIPAA assessment?

LBMC publishes no fee bands publicly — assessment fees are scoped per engagement, so request a scoped quote for an exact figure.

Is LBMC accredited to assess HIPAA?

There is no government accreditation for HIPAA assessors, so no firm can hold one. What matters is healthcare assessment experience — ask for references and the named assessment team.

Does LBMC cover what my organization needs?

They describe themselves as: Top-50 advisory and CPA firm; healthcare practice. They state they support HIPAA, HITRUST, SOC 1, SOC 2 — confirm scope, team, and fee in a written engagement before committing.

Similar firms

Clearwater

Healthcare-exclusive cybersecurity and compliance firm

Coalfire

Cybersecurity advisory and assessment firm

A-LIGN

Technology-enabled audit and assessment practice

Compare LBMC against alternatives

Get 2–3 scoped quotes from experienced HIPAA assessors matched to your size, setting, and timeline. Free, 2 minutes.

Get a free quote