New HIPAA Security Risk Tool From HHS

The U.S. Department of Health and Human Services (HHS) released a new HIPAA compliance tool for small- to medium-sized practices. 

The Security Risk Assessment (SRA) tool helps these practices conduct and document a risk assessment to determine potential HIPAA security risks and address them. The SRA website has user tutorials and videos available to help you get started.

Conducting a security risk assessment is a key requirement of the HIPAA Security Rule and a core requirement for physicians participating in the Medicare and Medicaid electronic health record (EHR) incentive programs. The SRA tool also allows practices to print a report that can be provided to auditors. 

If you need more in-depth assistance, the Texas regional extension centers (RECs) can help with EHR selection, workflow optimization with the EHR system, meeting meaningful use measures (including the security risk assessment), and attesting to meaningful use to receive the incentives. 

For more information about the Texas RECs, check out TMA's REC Resource Center. Our REC locator tool can help you determine which REC serves your area. 

You can direct questions related to EHRs and other office technologies to TMA's Health Information Technology Department by calling (800) 880-5720 or by email

Action, April 15, 2014


Comment on this (Must be logged in to comment)

Add Comment

Text Only 2000 character limit

Looking for more?