Risk Analysis, Encryption Stressed in HITECH Act Final Rules
A Close Look at Guidelines for Safeguarding Patient Data
… To guide healthcare providers, including smaller doctors’ offices, in conducting the Stage 3 risk analysis, the rule makes note of free tools and resources available to assist providers, including a Security Risk Assessment Tool developed by ONC and OCR.
But the use of that tool is daunting for some smaller healthcare entities, contends Keith Fricke, principal consultant at consulting firm tw-Security.
“The SRA tool is too overbearing for any organization to use, let alone small healthcare organizations, including small provider offices,” he says.