HIT Security Risk Assessment Questionnaire
KFMC is happy to make available to you the Health Information Technology (HIT) Security Risk Assessment Questionnaire. You are welcome to use this questionnaire to assist you with conducting your own Security Risk Assessment in order to meet the core Meaningful Use Measure for Medicare and Medicaid EHR Incentive payments.
Conducting a Security Risk Assessment and providing feedback on how to mitigate identified risks as well as providing best practices is one of the services that KFMC offers as the federally designated Health Information Technology Regional Extension Center (HITREC) for Kansas. If you would like to learn more about HITREC services please email RECsupport@kfmc.org.
HIT Security Risk Assessment Questionnaire
This HIT Security Risk Assessment Questionnaire contains a four-step process designed to assist an organization in assessing its level of risk against pre-identified threats and vulnerabilities. Utilizing this tool will better enable the user to identify conditions where Electronic Protected Health Information (EPHI) could be disclosed without proper authorization, improperly modified, or made unavailable when needed. Completing the questionnaire will provide an organization with information that can then be used to make risk management decisions on what reasonable and appropriate safeguards are needed to reduce risk to an acceptable level.