How do I perform a HIPAA risk assessment?

Answer

Define scope, inventory ePHI and systems, identify reasonably anticipated threats and vulnerabilities, assess current controls and likelihood and impact, then use the result to prioritize documented risk management.

References

• Risk analysis guidance HHS Office for Civil Rights