OCR Issues Updated HIPAA Security Risk Assessment Tool
Per the notice below, the United States Office for Civil Rights (OCR) has issued an updated Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Risk Assessment Tool.
HHS Releases Updated Security Risk Assessment Tool
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Assistant Secretary for Technology Policy (ASTP) are pleased to announce the release of version 3.6 of the Security Risk Assessment (SRA) Tool. To help you make the most of these updates, ASTP and OCR are hosting live Webinars on September 15 at noon ET or September 16 at 3pm ET. Experts will demonstrate new features, walk through reports, and answer your questions. Version 3.6 includes important updates to support your HIPAA risk assessment process:
- New reviewed-by confirmation button to record approvals and dates for audit tracking
- Updated NIST-aligned risk scale, changing “medium” to “moderate”
- Enhanced reports with section-specific details and updated disclaimers
- Refreshed library files to mitigate vulnerabilities in outdated components
- Improved content for questions, responses, and education
.png?sfvrsn=4447de7f_1)
