Blog

HIPAA Security Risk Analysis

• November 15, 2022

Experiencing a breach can have a significant financial and reputational impact on healthcare facilities. Although all breaches are not preventable, a facility’s best first step is to take a deep dive into its security posture by performing a Security Risk Analysis and identifying where they are vulnerable before cybercriminals exploit such vulnerabilities.

A risk analysis is an accurate and thorough assessment of the potential risks and vulnerabilities to a covered entity’s confidentiality, integrity, and availability of electronic protected health information. (45 C.F.R. § 164.308(a)(1)

Learning Objectives

• Background information on the Department of Health and Human Services requirements to complete a security risk analysis (SRA)
• Explain why you should conduct an SRA
• Describe key elements of the analysis
• Explain the importance of creating a follow-up corrective action plan and tracking process

Learn about the SRA process