HIPAA Risk Assessment Results Page

HIPAA Risk Group Structure

• HIPAA Risk Assessment results are organized into Risk Groups that align with the HIPAA Security Rule safeguard categories.

  • Administrative Safeguards include risk groups such as Security Management Process, Assigned Security Responsibility, Workforce Security and Information Access Management, Security Awareness and Training, Security Incident Response and Reporting, IT Security and Business Contingency Planning, Business Associate Agreements, and Security Record Retention.

  • Physical Safeguards are divided into Facility Access Controls, Workstation Use and Security, and Device and Media Controls.

  • Technical Safeguards include Access Control, Risk Assessment and Audit Controls, Authentication Integrity, and Transmission Security.

• Each risk group displays an individual score and corresponding risk level once the assessment is completed.

• Risk group scores collectively contribute to their respective safeguard totals and the overall HIPAA Risk Assessment score.

Recommended Actions, Documents, and Comments

Icons next to each question indicate whether a recommended action, document, or comment has been added. Hover over the question and select the Edit icon to review details or download attached documents.

How to Edit a Survey Response

After a survey is completed, a Risk Assessment Manager or Admin can review and edit responses. Edited questions are marked with a red asterisk (*) next to the updated score. Select Edit on the question to view details, including who made the change and when it was updated.

HIPAA Risk Assessment Report

Once all assigned users complete the assessment, the risk Status updates to Complete. You can generate a report for any completed survey by selecting the More options icon next to the survey name.