The Office of the National Coordinator for Health Information Technology (ONC) recognizes that conducting a risk assessment can be a challenging task. Thats why ONC, in collaboration with the HHS Office for Civil Rights (OCR) and the HHS Office of the General Counsel (OGC), developed a downloadable SRA Tool [.exe - 91.3 MB] to help guide you through the process. This tool is not required by the HIPAA Security Rule, but is meant to assist providers and professionals as they perform a risk assessment.

The SRA Tool takes you through each HIPAA requirement by presenting a question about your organizations activities. Your yes or no answer will show you if you need to take corrective action for that particular item. There are a total of 156 questions.

Resources are included with each question to help you:

Understand the context of the question

Consider the potential impacts to your PHI if the requirement is not met

See the actual safeguard language of the HIPAA Security Rule

You can document your answers, comments, and risk remediation plans directly into the SRA Tool. The tool serves as your local repository for the information and does not send your data anywhere else.

In this assignment, you will use SRA tool (installer exe file is attached file) to address set of questionnaire for a hypothetical health care provider of your choice and generate report to submit. The assignment instruction is described in the attached docx file. An installer is also attached in zip.

For additoinal information, please see

https://www.healthit.gov/providers-professionals/security-risk-assessment-tool

https://www.healthit.gov/sites/default/files/attachmenta-security_risk_assessment_tool_user_guide_v6.pdf