Altus-Small

HIPAA Security Risk Assessment (SRA) Tool

The Department of Health and Human Services (HHS), through its Office of the National Coordinator for Health Information Technology (ONC), has developed an interactive Security Risk Assessment Tool (SRA Tool) to assist covered entities in performing and documenting Health Insurance Portability and Accountability Act (HIPAA) security risk assessments.

Although HHS designed the SRA Tool for health care providers in small- to medium-sized offices, it is a helpful resource for all covered entities and business associates to review their implementation of the HIPAA Security Rule.

Learn more about the HIPAA Security Risk Assessment Tool.