The Security Rule

The HIPAA Risk Analysis is required by the HIPAA Security Rule 45 CFR 164.308(a)(1)(ii)(A) which states: (A) Risk analysis (Required). Conduct an accurate and thorough assessment of the potential risk and vulnerabilities to the confidentiality, integrity and availability of electronic protected health information held by the covered entity or business associate.

Risk Analysis and Management Worksheets

The Risk Analysis and Management Worksheets included in your HIPAA Documentation Kit provide you with a comprehensive and consistent method of staying in compliance with the HIPAA Security Rule when conducting your required risk analysis. These Worksheets provide the tools for performing a qualitative measurement of risk, measuring both the probability and the severity of an event. It is recommended that you re-review your risk analysis worksheets once a year. However, it is required to re-evaluate any questions if there is an event in your practice that might trigger a change to any of your responses.

Free Instructional Video

At first glance the worksheets may seem complicated, but the process is a lot easier than it looks. For this reason, and as part of our commitment to ongoing support, we’ve created a short instructional video to help guide you through filling out the worksheets as well as help you learn how to identify, assess and address risk.