Context
Risk analysis is part of the Security Rule administrative safeguards and should reflect the environment.
Example
An organization maps systems, threats, vulnerabilities, likelihood, impact, and existing controls.
References
- Risk analysis guidance HHS Office for Civil Rights