Feb 5th, 2025
On November 1, 2024, the Office for Civil Rights (OCR) announced the release of their updated Security Risk Assessment (SRA) tool. The announcement stated that “The SRA Tool is designed to aid small and medium-sized health care organizations in their efforts to identify and assess potential risks and vulnerabilities to electronic protected health information (ePHI) when conducting a risk analysis as required by the HIPAA Security Rule. Conducting an accurate and thorough risk analysis is a foundational activity to protect ePHI and comply with the HIPAA Security Rule.”
This free helpful tool can help your organization to complete their annual Security Risk Assessment as part of HIPAA compliance.
Visit to the HealthIT.gov website for more information about this tool as well as a link to download it.