Inherent Security

HIPAA Compliance solutions for Series A Startups - Fortune 500 Health Tech companies.

We're here to make HIPAA simple, secure, and profitable.

Health Tech SaaS, Telehealth, EHR, and MedTech companies trust us to stay compliant and competitive.

We don’t just follow best practices, we’ve lived them.
We’ve partnered with Business Associates and Covered Entities across the spectrum.
Our deep knowledge means tailored solutions unique to your business.

Here’s how we get it done:
→ HIPAA Compliance management to keep you on track.
→ CISO level guidance, acting as an extension of your team.
→ A no-nonsense gap assessment to uncover your shortcomings.
→ Digital Security Awareness Training to keep your team vigilant against threats.

We also tackle SOC 2, ISO 27001, and PCI-DSS to make you standout in the market.

Lead with confidence:
Book a 1:1 consultation: https://calendly.com/inherentsecurity/30min

Let’s protect your innovation of today that's shaping tomorrow.

CEO & Founder

American College of Cardiology

Assisted with the development of the HIPAA and PCI DSS Compliance Program for a Healthcare Non-Profit with a strong emphasis on IT Governance. Developed security policies, standards, and procedures unique to HIPAA using the NIST Cyber Security Framework and Special Publications. Manage, test, recommend, and implement HIPAA and NIST security controls using a defensed in-depth methodology. Assist with risk and security control assessments; disseminate findings to senior executives.

Key Services: 

->Manage HIPAA and HITECH assessments to identify risks, create risk register, develop milestones, and satisfy controls in accordance with business objectives.

->Develop HIPAA Security Awareness programs and educational materials to evaluate and drive the effectiveness of the user awareness. 

->Increased organization’s threat identification and incident response rate by implementing and optimizing tools; developing the escalation process. 

->Develop executive reports to identify areas of improvement, create milestones, and track the progress of the security program.

->Collaborate with DevOps to identify web application assets and mitigate security vulnerabilities in code.

HIPAA Compliance Management

Confidential

Served as the primary point of contact for overseeing and developing the cybersecurity and HIPAA Compliance program for a hospital. Performed network architectural, endpoint, web application, and medical device reviews for 500+ devices.

Key Services:					

->Assisted Privacy and Security Directors with refocusing the hospital’s culture by incorporating security into workflows.

->Performed penetration test simulations to identify risks.

->Built, installed, and configured SIEM platform to initiate hospital’s Threat Monitoring program.

->Implemented USB experiment to baseline user security awareness program.

->Implemented HIPAA requirements to align with organizational objectives.

Cybersecurity & HIPAA Compliance Consultant 

Worried about HIPAA compliance slipping through the cracks?

Tired of vendor security questionnaires slowing you down?

Want to stand out in healthcare without risking patient data?

I’m here to make HIPAA simple, secure, and profitable.

For 14 years, I’ve helped Series A Startups - Fortune 500s protect their patients and win new business.

Health Tech SaaS, Telehealth, EHR, and MedTech companies trust me to stay compliant and competitive.

I don’t just follow best practices, I’ve lived them.
I’ve partnered with Business Associates and Covered Entities across the spectrum.
My deep knowledge means tailored solutions unique to your business.

Here’s how we get it done:

→ HIPAA Compliance management to keep you on track.
→ CISO level guidance, acting as an extension of your team.
→ A no-nonsense gap assessment to uncover your weaknesses.
→ Digital Security Awareness Training to keep your team vigilant against threats.

I also tackle SOC 2, ISO 27001, and PCI-DSS to make you standout in the market.

Lead with confidence:
Book a 1:1 consultation: https://calendly.com/inherentsecurity/30min

Let’s protect your innovation of today that's shaping tomorrow.

Im a 1%er.

While everyone else is plugged in, I'm locked in.

I realized something in the sauna today.

Everyone had headphones in.

Doom scrolling.

Watching.

Some even talking on the phone!

I was the only one sitting there...

Thinking.

No noise. 

No notifications.

Just stillness.

It hit me…

That’s what separates the 1%.

Not how much money you make.

Not how heavy you lift.

Just focus.

We’re addicted to stimulation.

But clarity comes from stillness.

This is when my best ideas surface.

Not from a podcast.

Not from another “10x” clip.

From silence.

The 1% don’t work harder.

They think clearer.

My bonus fuel for the week:

Pumpkin Smash
→ rich in vitamin A, magnesium, and fiber
→ calms the nervous system and stabilize energy

Eggs
→ choline for sharper memory
→ you know the drill

Avocado
→ loaded with healthy fats and potassium
→ keeps energy steady, improves blood flow in the brain

No supplements.
No shortcuts. 
Just nutrients to stay sharp.

Focus food for the 1%.

𝗣.𝗦. What's your go to meal for energy?

Larry Trotter II

Providing HIPAA Compliance solutions for health tech leaders. Solving what software can’t.

42% of healthcare breaches come from vendors.

And buyers know it.

IBM’s cybersecurity report last year was alarming:

Vendors accounted for 42% of healthcare breaches.

The highest across all industries.

That’s why health systems are beefing up vendor security.

Because when health tech gets breached...

It causes the entire care ecosystem to collapse.

Here’s what that looks like in real life:

🟥If your cloud-based EHR halts…

↳ Patient records freeze
↳ Billing stops
↳ Scheduling breaks
↳ Compliance reporting stops

One outage = four paralyzed departments.

🟥If an AI feature mishandles PHI…

↳ Clinical teams panic
↳ Patients lose trust
↳ Regulators come knocking
↳ Your contract dies

🟥 If 𝘺𝘰𝘶𝘳 vendor has weak controls…

↳ Their breach becomes your breach
↳ Health systems see it as 𝘺𝘰𝘶𝘳 failure
↳ Your product gets labeled “risky”

Healthcare buyers are paranoid.
And protecting their operations.

This is why security matters
and compliance reviews comes before deals.

If you want to position your product as low-risk:

Get the HIPAA Exposure Guide: https://lnkd.in/eDzziDwd

It’s helps health tech teams tighten their posture before buyers start digging.

𝗣.𝗦. Have you ever been impacted by a vendor outage?
Comment below.

I had a problem with my former job.

It sucked because my ideas were getting buried.

And I wasn't given the chance to shine.

I tried to solve it by being a "team player."

Still nothing changed.

Until made a decision.

To start my own company!

I had to change my thinking.

So I made a few swaps:

🟦 Mindless TV → Reading books

🟦 Failing → Lessons Learned

🟦 The perfect moment → "Do It Now'

🟦 Blame → Ownership

🟦 Ol' friends → Likeminded people

🟦 Not knowing → Figuring it out

🟦 Clubs → Seminars

🟦 Influencers → "Who do you listen to"

I'm not exactly where I want to be.

But I'm not too far from it either.

Plus...the view is better over here!

𝗣.𝗦. What was that moment that shifted your life?

Comment below, we're all in this together 👇

=============
Polenta + Banana 👌
=============

The DiMe AI Playbook got a lot right.



Except for one huge thing...

Cybersecurity.

It’s bundled quietly under “governance."

But it should’ve been a pillar of its own.

42% of healthcare breaches last year came from vendors.

So if you're adding AI features in health tech.

By integrating third-party solutions.

Your vendors probably have flaws.

Before you choose your partner, ask:

➤ Is the tool Hipaa and SOC 2 compliant?

➤ How often are they stress testing models?

➤ What is their breach response plan?

Health systems are asking these questions before deals.

If you can’t answer, you’re not ready to sell.

The DiMe Playbook got the strategy right.

But without emphasizing security, what’s the point of risking it?

You have too much at stake!

Cybersecurity can’t live in the shadows of governance.

It deserves its own pillar!

𝗣.𝗦. Ever met a vendor not clear on their breach protocols?

I have...true story.

Secrets to Building a
Health Tech GTM Engine

Your biggest security risk isn’t your product.

It’s your vendors.

In 2025, most healthcare breaches didn't start inside.

They started in the supply chain.

And that should make every health tech founder pause.

If you sell to hospitals, your risk isn’t limited to product.

Health systems evaluate the tools you rely on...

The APIs you integrate…

And the subcontractors touching your data.

In my latest article, I break down 5 hidden vendor risks.

And the simple steps to fix them.

Read the full article 👇

P.S. Do you think AI can solve this?

DM me "Vendor" and I'll send you a checklist for your next vendor assessment.

View newsletter: Health Tech Cybersecurity News

TL;DR Health systems aren’t only evaluating your product, they’re assessing your entire ecosystem. For health tech vendors selling into these systems,

Open article: Hidden Risks Health Tech Can't Ignore by Larry Trotter II • 4 min read

7 Hipaa best practices every health tech vendor must master.

Health systems vet their vendors looking for more than innovation.

They’re looking for trust.

Make it easy for them.

Implement:

✅A Governance strategy
✅Workforce training
✅Risk assessments
✅Vendor oversight
✅And More...

In my latest article, I break down the 7 Hipaa Compliance best practices every health tech vendor must master to shorten procurement cycles and strengthen buyer confidence.

Read it below 👇

TL;DR Selling to health systems means playing by HIPAA's rules. Health Tech vendors have always been under the same scrutiny as covered entities, and 

Open article: HIPAA Compliance Best Practices Every Health Tech Vendor Must Master by Larry Trotter II • 5 min read

HIPAA Compliance Best Practices Every Health Tech Vendor Must Master

10 ways AI Governance gives you a competitive edge.

Every health tech company is racing to add AI.

Every health system is racing to adopt it.

Few are thinking about governance.

Even fewer think about side effects.

For health tech leaders bad choices can tarnish your reputation.

For health systems it can mean patient outcome woes.

For founders this can trigger a Hipaa audit.

Instead, let AI Governance be your advantage.

Not your downfall.

Here are 10 ways it gives you a competitive edge:

1] Shows investors you control risk not just react to it.

2] Helps you stay prepared for any state laws.

3] Protects your brand from breach headlines.

4] Turns compliance into a sales advantage.

5] Builds buyer trust before the first pilot.

6] Keeps patients out of harms way.

7] Prevents “AI” from touching PHI.

8] Speeds up procurement reviews.

9] Fewer sprints for your engineers.

10] Reduces audit chaos.

AI moves fast.

Governance moves faster.

And better!

Need help with your AI Governance plan?

Schedule a call: https://lnkd.in/eKmGi-mm 👈

This is the strategy we live for.

𝗣.𝗦. I think engineers would appreciate #5, Agree?

taplio

Larry Trotter II's Linkedin Analytics

Larry Trotter II

Performance ScoreLarry Trotter II's LinkedIn Performance

Larry Trotter II's Best Posts (last 30 days)

Ready to grow your LinkedIn presence?

taplio

.css-6ytdur{background-image:linear-gradient(284deg, rgba(39, 43, 72, 1) 0%, rgba(33, 47, 183, 1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Larry Trotter II's Linkedin Analytics

Larry Trotter II

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Larry Trotter II's LinkedIn Performance

Larry Trotter II's Best Posts .css-1emoo84{font-size:var(--chakra-fontSizes-md);font-weight:400;color:var(--chakra-colors-gray-600);}(last 30 days)

Ready to grow your LinkedIn presence?

Larry Trotter II's Linkedin Analytics

Performance ScoreLarry Trotter II's LinkedIn Performance

Larry Trotter II's Best Posts (last 30 days)