Security Risk Assessment Tool - 2014

The HIPAA Security Rule requires practices to perform and document a security risk assessment to identify areas where protected health information may be vulnerable. The Office of the National Coordinator (ONC), the Office of Civil Rights (OCR), and the Office of General Counsel (OGC) have collaborated on developing a free Security Risk Assessment tool for small to medium sized practices that is available in several formats:

  • Windows 7 OS for desktop and laptops,
  • iOS for iPad available free from the Apple App store (search for ‘HHS SRA Tool’)
  • Paper

Your results can be stored electronically or printed in PDF or Excel format. Use the easy to follow User Guide for guidance in downloading and using the tool.


(202) 863-2584

American Congress of Obstetricians and Gynecologists
409 12th Street SW, Washington, DC  20024-2188 | Mailing Address: PO Box 70620, Washington, DC 20024-9998