Bundles build seriesbundleopen sourcesecurity programme

HIPAA + Build Foundation

HIPAA Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

The compliance workbook tells you what the framework requires and how to evidence it. The build volumes make the controls exist.

HIPAA Readiness Accelerator — the framework workbook, with its requirement mapping and evidence set.

Vol. 02 — Asset Inventory & Discovery. Everything scopes from the inventory, and most framework requirements are unanswerable without it.

Vol. 01 — Detection & Monitoring. The continuous-monitoring requirement, actually built — with the tuning and validation that turn a running stack into evidence.

Vol. 06 — Identity & Access. Access control, authenticators and joiner-mover-leaver, which between them carry more framework clauses than anything else in the series.

Each build volume prints the exact clauses it satisfies before any installation step, so the work lands in your evidence pack rather than beside it.

Twelve months of updates on the build volumes. Ships without support.

What's in this bundle

Compliance 23 tabs

HIPAA Readiness Accelerator

23-tab HIPAA compliance workbook built for the 2026 Final Rule — covers all current safeguards plus the 12 new mandatory requirements, IoMT risk, BAA management, breach notification matrix, and a dedicated 2026 gap analysis tab.

Architecture & Build 9 pages

Build Series Vol. 02 — Asset Inventory & Discovery

Discovery tells you what is out there. The source of truth holds what you have decided about it. The control lives in the reconciliation between them, not in either list.

Architecture & Build 9 pages

Build Series Vol. 01 — Detection & Monitoring

Wazuh, Suricata and Zeek assembled into a stack one person can operate, with the tuning and detection validation that almost every deployment skips.

Architecture & Build 9 pages

Build Series Vol. 06 — Identity & Access

One front door, authenticators that survive phishing, privileged identities separated from daily work, and access that genuinely ends when people do.