Security risk analysis

All providers who are “covered entities” under the Health Insurance Portability and Accountability Act (HIPAA) are required to perform a security risk analysis.