Feds Release Updated HIPAA Security Risk Analysis Tool

The U.S. Department of Health and Human Services released version 3.6 of the Security Risk Assessment (SRA) tool, aimed at helping small and midsized healthcare organizations with risk analysis. The updated tool includes features like a “reviewed-by” confirmation button, an updated risk scale, and enhanced reports. While experts acknowledge improvements, they note the tool remains limited for complex environments and should be used as a starting point for a comprehensive risk management program.