ONC releases a new version of Security Risk Assessment Tool (Version 3.4).
The Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC) developed the SRA Tool to help small- and medium-sized healthcare providers identify and assess risks and vulnerabilities to electronic protected health information (ePHI). The tool is a software application that organizations can download at no cost. This tool further enhances the user experience and helps covered entities navigate risk assessment requirements under the HIPAA Security Rule.
Version 3.4 contains several key updates based on user feedback, including a remediation report, which allows users to track responses to vulnerabilities inside the tool and log remediation efforts. In addition, the tool now contains a glossary and tool tips section, where users can learn more information and easily navigate the tool’s features.
“As hacking and ransomware attacks continue to increase within the health care sector, it’s now more important than ever for organizations to improve their cybersecurity,” HHS stated in a press release.
To download, please visit: https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool