From HHS OCR:
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Assistant Secretary for Technology Policy (ASTP) are pleased to announce the release of version 3.6 of the Security Risk Assessment (SRA) Tool.
To help you make the most of these updates, ASTP and OCR are hosting live webinars on September 15 at noon ET or September 16 at 3pm ET. Experts will demonstrate new features, walk through reports, and answer your questions.
Version 3.6 includes important updates to support your HIPAA risk assessment process:
- New reviewed-by confirmation button to record approvals and dates for audit tracking
- Updated NIST-aligned risk scale, changing “medium” to “moderate”
- Enhanced reports with section-specific details and updated disclaimers
- Refreshed library files to mitigate vulnerabilities in outdated components
- Improved content for questions, responses, and education
