The Office of the National Coordinator of Health IT and the Office for Civil Rights recently posted an updated HIPAA security risk analysis tool. The tool, which is available here, is designed to help small and medium-sized covered entities (CEs) and business associates complete security risk analyses. It is a requirement for CEs to complete.