Updated Version of HIPAA Security Risk Assessment Tool for Small/Medium Health-Care Practices

The Office of the National Coordinator for Health Information Technology (ONC) and the Health and Human Services (HHS) Office for Civil Rights (OCR) have recently launched a joint Health Insurance Portability and Accountability Act (HIPAA) Security Risk Assessment (SRA) Tool.

The tool is designed to assist small and medium-sized health-care practices and business associates in complying with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. All electronic protected health information (ePHI) created, received, maintained, or transmitted by an organization is subject to the HIPAA Security Rule. Particularly, the SRA Tool helps entities identify and assess risks and vulnerabilities to their electronic protected health information (ePHI), which can be downloaded at no cost. It is designed to help smaller organizations identify risk and make a plan for remediation and compliance.