Guide
HIPAA Security Risk Analysis for Small Practices: What to Document
A HIPAA Security Rule risk analysis documents where electronic protected health information exists, the threats and vulnerabilities that could affect it, the likelihood and impact of those risks, and the safeguards or corrective actions the practice will address. The analysis should reflect the practice’s own systems, workforce, vendors, and environment.
Last reviewed: