The Security Risk Assessment Tool from ONC and OCR: An Overview for Small and Medium Practices

Register for an introductory webinar on the free Security Risk Assessment Tool (SRA Tool) with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC). The webinar will also feature changes in SRA Tool version 3.7, available in September 2026.

What is the Security Risk Assessment Tool (SRA Tool)?

ONC, in collaboration with OCR, offers a free, downloadable Security Risk Assessment (SRA) Tool to help guide small and medium-sized provider practices and organizations in their efforts to assess security risks. The tool is designed to help organizations conduct a security risk assessment as required by the HIPAA Security Rule.

During this webinar, attendees will receive:

• An introduction to security risk assessment
• Instructions on how to download, install, and use the SRA Tool
• An overview of changes in the new SRA Tool 3.7 Release
• An opportunity for Q&A

Presenters will include:

• John Christensen, Altarum
• Nick Heesters, OCR
• Mauricio Lovelace, ONC

Who should attend?

This webinar is ideal for those who manage operations, including information technology responsibilities, in small and medium-sized practices of all specialties—medical, dental, optometric, behavioral health, physical/occupational therapy, speech-language pathology, chiropractic, and more.

To accommodate the busy schedules of small and medium practices, there are two opportunities to attend this webinar live.  They are:

• Tuesday, September 15, 12:00-1:00 p.m. ET Register for this session.
• Wednesday, September 16, 3:00–4:00 p.m. ET Register for this session.

Additional Resources:

• Learn more about the SRA Tool on HealthIT.gov
• Health IT Privacy and Security Resources for Providers