The Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC) have released version 3.1 of the HHS Security Risk Assessment (SRA) Tool.
The tool is designed to help small- to medium-sized health care organizations perform risk assessments regarding potential malware, ransomware, and other cyberattacks.