Jason Miller, OD, MBA
OOA President

Jay Henry, OD, MS
OOA Third Party Committee

An OOA member asked, “Is there a template or worksheet available that would allow me to do a security risk analysis to satisfy meaningful use requirements?”

The Security Risk Analysis (SRA) is most often the reason someone fails a MU audit. If you use a company to help with the SRA (cost $1,500-$2,000), the company may update that analysis the following year at no extra cost.  Because it is very important to protect patient data, we recommend hiring someone to make sure that data is not at risk for a breach.

Here is the link to the online tool provided by CMS.   It is a downloadable program that will walk you thru the analysis.

https://www.healthit.gov/providers-professionals/security-risk-assessment-tool