Protect your organization and your assets

What is a Security Risk Assessment?

The HIPAA Security Rule requires physicians to protect patients' electronically stored, protected health information (known as “ePHI”) by using appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity and security of this information. Essentially, the Security Rule operationalizes the protections contained in The Privacy Rule which protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral.


All covered entities, defined in the HIPAA rules as (1) health plans, (2) health care clearinghouses, and (3) health care providers who transmit any health information electronically, must assess their security risks.  Even if an entity employs a certified electronic health record (EHR) technology, they must still put in place administrative, physical and technical safeguards to maintain compliance with the Security Rule and document every security compliance measure.


The assessment should identify, assesses, and lead to the implementation of key security controls in and organization's applications.  It identifies each applications' security defects and vulnerabilities allowing the organization to address deficiencies and document policies and procedures.  It is and integral part of an organization’s risk management process.



Security Questions

  • Is a Security Risk Assessment Required?

    Under the HIPAA Security Rule, you are required to conduct an accurate and thorough analysis of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information (ePHI) held by the covered entity or business associate.


  • Does Streamlinz offer assistance?

    Yes, Streamlinz offers consultative and training services.  Please contact us for a customized review and options.


  • How often do we need to complete an assessment?

    Consistent HIPAA security risk assessments are essential to maintaining compliance for your healthcare organization. It allows you to understand where protected health information (PHI) may be at risk. HIPAA does require periodic risk assessments at least once per year.

What you get with the Security Risk Assessment

AI Guided Assistance

A step by step guide of the HIPAA Security Rule and the Administrative, Physical and Technical Safeguards required to comply with the HIPAA Security Rule.

Automated Tasks

Task lists assigned to the proper resources with automated reminders to ensure tasks are tracked and monitored until completion.

Remediation Plan

A fully documented set of steps required to verify the organization has assessed all components of the HIPAA Security Rule on an annual basis.

Business Intelligence

One touch reporting on dashboards and compliance reports for distribution throughout the enterprise and outside reporting agencies.