HIPAA Risk Assessment Scope & Deliverables

A HIPAA risk assessment measures the level of compliance of a covered entity’s policies and systems with the HIPAA Security Rule and HIPAA Privacy Rule and identifies potential risks and vulnerabilities to the confidentiality, availability, and integrity of any personal health information (PHI) that the entity creates, receives, maintains, or transmits. HIPAA risk assessments should be periodically reviewed and depending on the circumstances may be conducted annually.