Compliance Glossary

The OCR in partnership with the Office of the National Coordinator for Health Information Technology, developed a downloadable Security Risk Assessment (SRA) Tool that guides users through the security risk assessment process by utilizing a simple, wizard-based approach as asked for by the CMS or the Centers for Medicare and Medicaid Service Electronic Health Record (EHR) Incentive Program and the HIPAA Security Rule. Users are guided through threat and vulnerability assessments, multiple-choice questions, and asset and vendor management.