Tool Helps Users Identify HIPAA Security Risks and Safeguards

A new tool from the Office of the National Coordinator for Health Information Technology (ONC) can help make the Health Insurance Portability and Accountability Act (HIPAA) Security Rule more understandable and security risk assessments easier. The Security Risk Assessment (SRA) Tool lets users take a self-directed tour of HIPAA standards and conduct a self-paced risk assessment.

Features include:

Context sections to help understand potential threats, vulnerabilities and impacts
Examples of safeguards that could be instituted
Ability to export the report as a Microsoft Excel or .pdf document to share or analyze the information in a convenient format

The SRA Tool is available in Windows and iOS iPad versions. ONC will accept public comments on the tool until June 2. The comments will be used for improvements in future updates.