--- title: Why Your Practice Needs a HIPAA Security Risk Assessment description: Your practice may not have the time, resources, or expertise to conduct a HIPAA SRA, but that doesn’t mean you're safe. You can get HIPAA SRA help. image: https://blog.icoreconnect.com/hubfs/AdobeStock_243168932.jpeg --- - [Platform](http://www.icoreconnect.com/icoreenterprise) - [About](http://www.icoreconnect.com/about) - [Partners](http://www.icoreconnect.com/icore-partners-practice-partners) - [Contact](http://www.icoreconnect.com/contact) - [Careers](https://icoreconnect.betterteam.com/) - [News](http://www.icoreconnect.com/news) - Log In - [iCoreCodeGenius](https://cg.icoreconnect.com) - [iCoreExchange](https://portal.icoreexchange.com) - [iCoreHuddle](https://huddle.icoreconnect.com) - [iCorePay](https://admin.featherpay.io) - [iCoreRx](http://www.icoreconnect.com/login) [![iCoreConnect Logo](https://blog.icoreconnect.com/hubfs/GRFX/Logos/Company%20Logo/iCoreConnect/ICCT_logo_for_DRK_BKGND.svg) ![iCoreConnect Logo](https://blog.icoreconnect.com/hubfs/GRFX/Logos/Company%20Logo/iCoreConnect/ICCT_logo_for_WHT_BKGND.svg)](http://www.icoreconnect.com) - Dental - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreVerify | Automated Insurance Verifications](http://www.icoreconnect.com/icoreverify) - [iCoreClaims | Dental Claims and Billing](http://www.icoreconnect.com/icoreclaims-dental-claims-and-billing) - [iCorePay | Patient Payments](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) - [iCoreAcademy | Patient Education Video Library](http://www.icoreconnect.com/icoreacademy) - [iCoreAnalytics | Actionable Practice Analytics](http://www.icoreconnect.com/icoreanalytics) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreCodeGenius | Medical Coding for Dental](http://www.icoreconnect.com/icorecodegenius-dental) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) - Medical - [iCoreCodeGenius | Rapid ICD-10 Coding](http://www.icoreconnect.com/icorecodegenius-medical) - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) - [iCorePay | Patient Payments](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) - Business IT - [iCoreIT | Business IT Managed Services](http://www.icoreconnect.com/icoreit) - [iCoreCloud | Encrypted Cloud Backup](http://www.icoreconnect.com/icorecloud) - [iCoreSecure | Encrypted Email](http://www.icoreconnect.com/icoresecure) - Endorsed By - [Alaska Dental Society](http://www.icoreconnect.com/alaska-dental-society-dental-software) - [Arizona Dental Association](http://www.icoreconnect.com/arizona-dental-association) - [BEST for Dentistry](http://www.icoreconnect.com/best-about) - [California Association of Orthodontists](http://www.icoreconnect.com/california-association-orthodontics-software) - [California Dental Association](http://www.icoreconnect.com/california-dental-association-dental-software) - [Colorado Dental Association](http://www.icoreconnect.com/colorado-dental-association-dental-software) - [Connecticut Dental Association](http://www.icoreconnect.com/connecticut-props-dental-software) - [Delaware State Dental Society](http://www.icoreconnect.com/delaware-dental-society-dental-software) - [Georgia Dental Association](http://www.icoreconnect.com/georgia-dental-association-dental-software) - [Illinois State Dental Society](http://www.icoreconnect.com/illinois-dental-society-dental-software) - [Kansas Dental Association](http://www.icoreconnect.com/kansas-dental-association-dental-software) - [Maine Medical Association](http://www.icoreconnect.com/maine-medical-healthcare-software) - [Maryland Dental Association](http://www.icoreconnect.com/maryland-state-dental-association) - [Michigan Dental Association](http://www.icoreconnect.com/michigan-dental-association-dental-software) - [Mississippi Dental Association](http://www.icoreconnect.com/mississippi-dental-association-dental-software) - [Montana Dental Association](http://www.icoreconnect.com/montana-dental-association-about) - [Nevada Dental Association](http://www.icoreconnect.com/nevada-dental-association-dental-software) - [North Carolina Dental Society](http://www.icoreconnect.com/north-carolina-dental-society-dental-software) - [North Dakota Dental Association](http://www.icoreconnect.com/missouri-dental-association-dental-software-1) - [Oklahoma Dental Association](http://www.icoreconnect.com/oklahoma-dental-association-dental-software) - [Oregon Dental Association](http://www.icoreconnect.com/oregon-dental-association-perks-dental-software) - [Pennsylvania Dental Association](http://www.icoreconnect.com/pennsylvania-dental-association-dental-software) - [Rhode Island Dental Association](http://www.icoreconnect.com/rhode-island-dental-association-dental-software) - [South Carolina Dental Association](http://www.icoreconnect.com/south-carolina-dental-association-dental-software) - [StartUp Health](https://www.startuphealth.com/) - [Tennessee Dental Association](http://www.icoreconnect.com/tennessee-dental-association-dental-software) - [Texas Dental Association Perks Program](http://www.icoreconnect.com/texas-dental-association-perks) - [Virginia Dental Association VDA Services](http://www.icoreconnect.com/virginia-dental-association-dental-software) - [Washington State Dental Association](http://www.icoreconnect.com/washington-state-dental-association-dental-software) - [Wyoming Medical Society](http://www.icoreconnect.com/wyoming-medical-society-dental-software) - Resources - [Whitepapers](http://www.icoreconnect.com/resources) - [Blog](https://blog.icoreconnect.com/articles) - [News](http://www.icoreconnect.com/icoreconnect-news) - [ePrescribe Laws](http://www.icoreconnect.com/state-epcs-and-pdmp-mandates) Search *Search* [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) Search *Search* [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) - Dental *Toggle Menu* - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreVerify | Automated Insurance Verifications](http://www.icoreconnect.com/icoreverify) - [iCoreClaims | Dental Claims and Billing](http://www.icoreconnect.com/icoreclaims-dental-claims-and-billing) - [iCorePay | Patient Payments](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) - [iCoreAcademy | Patient Education Video Library](http://www.icoreconnect.com/icoreacademy) - [iCoreAnalytics | Actionable Practice Analytics](http://www.icoreconnect.com/icoreanalytics) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreCodeGenius | Medical Coding for Dental](http://www.icoreconnect.com/icorecodegenius-dental) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) - Medical *Toggle Menu* - [iCoreCodeGenius | Rapid ICD-10 Coding](http://www.icoreconnect.com/icorecodegenius-medical) - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) - [iCorePay | Patient Payments](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) - Business IT *Toggle Menu* - [iCoreIT | Business IT Managed Services](http://www.icoreconnect.com/icoreit) - [iCoreCloud | Encrypted Cloud Backup](http://www.icoreconnect.com/icorecloud) - [iCoreSecure | Encrypted Email](http://www.icoreconnect.com/icoresecure) - Endorsed By *Toggle Menu* - [Alaska Dental Society](http://www.icoreconnect.com/alaska-dental-society-dental-software) - [Arizona Dental Association](http://www.icoreconnect.com/arizona-dental-association) - [BEST for Dentistry](http://www.icoreconnect.com/best-about) - [California Association of Orthodontists](http://www.icoreconnect.com/california-association-orthodontics-software) - [California Dental Association](http://www.icoreconnect.com/california-dental-association-dental-software) - [Colorado Dental Association](http://www.icoreconnect.com/colorado-dental-association-dental-software) - [Connecticut Dental Association](http://www.icoreconnect.com/connecticut-props-dental-software) - [Delaware State Dental Society](http://www.icoreconnect.com/delaware-dental-society-dental-software) - [Georgia Dental Association](http://www.icoreconnect.com/georgia-dental-association-dental-software) - [Illinois State Dental Society](http://www.icoreconnect.com/illinois-dental-society-dental-software) - [Kansas Dental Association](http://www.icoreconnect.com/kansas-dental-association-dental-software) - [Maine Medical Association](http://www.icoreconnect.com/maine-medical-healthcare-software) - [Maryland Dental Association](http://www.icoreconnect.com/maryland-state-dental-association) - [Michigan Dental Association](http://www.icoreconnect.com/michigan-dental-association-dental-software) - [Mississippi Dental Association](http://www.icoreconnect.com/mississippi-dental-association-dental-software) - [Montana Dental Association](http://www.icoreconnect.com/montana-dental-association-about) - [Nevada Dental Association](http://www.icoreconnect.com/nevada-dental-association-dental-software) - [North Carolina Dental Society](http://www.icoreconnect.com/north-carolina-dental-society-dental-software) - [North Dakota Dental Association](http://www.icoreconnect.com/missouri-dental-association-dental-software-1) - [Oklahoma Dental Association](http://www.icoreconnect.com/oklahoma-dental-association-dental-software) - [Oregon Dental Association](http://www.icoreconnect.com/oregon-dental-association-perks-dental-software) - [Pennsylvania Dental Association](http://www.icoreconnect.com/pennsylvania-dental-association-dental-software) - [Rhode Island Dental Association](http://www.icoreconnect.com/rhode-island-dental-association-dental-software) - [South Carolina Dental Association](http://www.icoreconnect.com/south-carolina-dental-association-dental-software) - [StartUp Health](https://www.startuphealth.com/) - [Tennessee Dental Association](http://www.icoreconnect.com/tennessee-dental-association-dental-software) - [Texas Dental Association Perks Program](http://www.icoreconnect.com/texas-dental-association-perks) - [Virginia Dental Association VDA Services](http://www.icoreconnect.com/virginia-dental-association-dental-software) - [Washington State Dental Association](http://www.icoreconnect.com/washington-state-dental-association-dental-software) - [Wyoming Medical Society](http://www.icoreconnect.com/wyoming-medical-society-dental-software) - Resources *Toggle Menu* - [Whitepapers](http://www.icoreconnect.com/resources) - [Blog](https://blog.icoreconnect.com/articles) - [News](http://www.icoreconnect.com/icoreconnect-news) - [ePrescribe Laws](http://www.icoreconnect.com/state-epcs-and-pdmp-mandates) - [Platform](http://www.icoreconnect.com/icoreenterprise) - [About](http://www.icoreconnect.com/about) - [Partners](http://www.icoreconnect.com/icore-partners-practice-partners) - [Contact](http://www.icoreconnect.com/contact) - [Careers](https://icoreconnect.betterteam.com/) - [Investors](https://ir.icoreconnect.com) - Log In - [iCoreCodeGenius](https://cg.icoreconnect.com/) - [iCoreExchange](https://portal.icoreexchange.com/) - [iCoreHuddle](https://huddle.icoreconnect.com/) - [iCorePay](https://admin.featherpay.io) - [iCoreRx](https://www.icoreconnect.com/login) - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreVerify | Automated Insurance Verifications](http://www.icoreconnect.com/icoreverify) - [iCoreClaims | Dental Claims and Billing](http://www.icoreconnect.com/icoreclaims-dental-claims-and-billing) - [iCorePay | Statements, Payments, and Billing](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) - [iCoreAcademy | Patient Education Video Library](http://www.icoreconnect.com/icoreacademy) - [iCoreAnalytics | Actionable Practice Analytics](http://www.icoreconnect.com/icoreanalytics) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreCodeGenius | Medical Coding for Dental](http://www.icoreconnect.com/icorecodegenius-dental) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) **![Laptop Opening with Car 200h](https://blog.icoreconnect.com/hs-fs/hubfs/Laptop%20Opening%20with%20Car%20200h.png?width=300&name=Laptop%20Opening%20with%20Car%20200h.png)** [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) - [iCoreCodeGenius | Rapid ICD-10 Coding](http://www.icoreconnect.com/icorecodegenius-medical) - [iCoreRx | Cloud ePrescribing](http://www.icoreconnect.com/icorerx) - [iCoreExchange | Encrypted HIPAA Email](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud | Encrypted HIPAA Cloud Backup](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreHIPAA | HIPAA Compliance Platform](http://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit-healthcare) - [iCorePay | Statements, Payments, and Billing](http://www.icoreconnect.com/icorepay-healthcare-billing-platform) **![Laptop Opening with Car 200h](https://blog.icoreconnect.com/hs-fs/hubfs/Laptop%20Opening%20with%20Car%20200h.png?width=300&name=Laptop%20Opening%20with%20Car%20200h.png)** [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) - [iCoreSecure | Encrypted Email](http://www.icoreconnect.com/icoresecure) - [iCoreCloud | Encrypted Cloud Backup](http://www.icoreconnect.com/icorecloud) - [iCoreIT | IT Managed Services](http://www.icoreconnect.com/icoreit) **![Laptop Opening with Car 200h](https://blog.icoreconnect.com/hs-fs/hubfs/Laptop%20Opening%20with%20Car%20200h.png?width=300&name=Laptop%20Opening%20with%20Car%20200h.png)** [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) - [Alaska Dental Society](http://www.icoreconnect.com/alaska-dental-society-dental-software) - [Arizona Dental Association](http://www.icoreconnect.com/arizona-dental-association) - [BEST for Dentistry](http://www.icoreconnect.com/best-about) - [California Association of Orthodontists](http://www.icoreconnect.com/california-association-orthodontics-software) - [California Dental Association](http://www.icoreconnect.com/california-dental-association-dental-software) - [Colorado Dental Association](http://www.icoreconnect.com/colorado-dental-association-dental-software) - [Connecticut Dental Association](http://www.icoreconnect.com/connecticut-props-dental-software) - [Delaware State Dental Society](http://www.icoreconnect.com/delaware-dental-society-dental-software) - [Georgia Dental Association](http://www.icoreconnect.com/georgia-dental-association-dental-software) - [Illinois State Dental Society](http://www.icoreconnect.com/illinois-dental-society-dental-software) - [Kansas Dental Association](http://www.icoreconnect.com/kansas-dental-association-dental-software) - [Maine Medical Association](http://www.icoreconnect.com/maine-medical-healthcare-software) - [Maryland State Dental Association](http://www.icoreconnect.com/maryland-state-dental-association) - [Michigan Dental Association](http://www.icoreconnect.com/michigan-dental-association-dental-software) - [Mississippi Dental Association](http://www.icoreconnect.com/mississippi-dental-association-dental-software) - [Montana Dental Association](http://www.icoreconnect.com/montana-dental-association-dental-software) - [Nevada Dental Association](http://www.icoreconnect.com/nevada-dental-association-dental-software) - [North Carolina Dental Society](http://www.icoreconnect.com/north-carolina-dental-society-dental-software) - [North Dakota Dental Association](http://www.icoreconnect.com/missouri-dental-association-dental-software-1) - [Oklahoma Dental Association](http://www.icoreconnect.com/oklahoma-dental-association-dental-software) - [Oregon Dental Association](http://www.icoreconnect.com/oregon-dental-association-perks-dental-software) - [Pennsylvania Dental Association](http://www.icoreconnect.com/pennsylvania-dental-association-dental-software) - [Rhode Island Dental Association](http://www.icoreconnect.com/rhode-island-dental-association-dental-software) - [South Carolina Dental Association](http://www.icoreconnect.com/south-carolina-dental-association-dental-software) - [StartUp Health](https://www.startuphealth.com/) - [Tennessee Dental Association](http://www.icoreconnect.com/tennessee-dental-association-dental-software) - [Texas Dental Association Perks Program](http://www.icoreconnect.com/texas-dental-association-perks) - [Virginia Dental Association VDA Services](http://www.icoreconnect.com/virginia-dental-association-dental-software) - [Washington State Dental Association](http://www.icoreconnect.com/washington-state-dental-association-dental-software) - [Wyoming Medical Society](http://www.icoreconnect.com/wyoming-medical-society-dental-software) **![Laptop Opening with Car 200h](https://blog.icoreconnect.com/hs-fs/hubfs/Laptop%20Opening%20with%20Car%20200h.png?width=300&name=Laptop%20Opening%20with%20Car%20200h.png)** [![Book a Demo](https://no-cache.hubspot.com/cta/default/7112411/045a0109-4dfb-426c-a72a-d072dee4017c.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/045a0109-4dfb-426c-a72a-d072dee4017c) ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 ##### Column Headline - Testing 1 - Sub Nav 1 - Sub Nav 2 - Testing 2 - Testing 3 4 min read # Why Your Practice Needs a HIPAA Security Risk Assessment [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott) Jun 15, 2023, 12:00:00 PM [HIPAA Compliance](https://blog.icoreconnect.com/articles/tag/hipaa-compliance) [Cybersecurity](https://blog.icoreconnect.com/articles/tag/cybersecurity) ![clipboard with paper reading HIPAA Risk Assessment243168932](https://blog.icoreconnect.com/hs-fs/hubfs/AdobeStock_243168932.jpeg?width=1200&height=800&name=AdobeStock_243168932.jpeg)There’s an old adage that states “What you don’t know can’t hurt you.” While that might be true in quite a few circumstances, it certainly doesn’t apply to HIPAA compliance. In fact, what you don’t know is likely to come back and haunt you–in the form of a data breach or HIPAA violation. But how do you figure out what you don’t know? How do you know what questions to ask or where to look when it comes to managing, monitoring, and improving your practice’s security stance? That’s where a HIPAA security risk assessment comes in. If you’re like most practices, you may not have the time, resources, or expertise to do a complete analysis of your security, but that doesn’t mean what you don’t know won’t hurt. Quick Links - [What is the HIPAA Security Rule?](https://blog.icoreconnect.com/articles/why-your-practice-needs-a-hipaa-security-risk-assessment#securityrule) - [What does HIPAA Compliance Require of Medical and Dental Practices?](https://blog.icoreconnect.com/articles/why-your-practice-needs-a-hipaa-security-risk-assessment#whatdoeshipaa) - [What is a HIPAA Security Risk Assessment?](https://blog.icoreconnect.com/articles/why-your-practice-needs-a-hipaa-security-risk-assessment#whatisSRA) - [Why Your Practice Needs a HIPAA Security Risk Assessment](https://blog.icoreconnect.com/articles/why-your-practice-needs-a-hipaa-security-risk-assessment#whyneeds) ## What is the HIPAA Security Rule? The [HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/index.html) provides the standards required nationally to protect electronic Protected Health Information (ePHI) when it is used, transmitted, or stored by healthcare providers. The rule requires three specific types of security measures be employed: administrative, physical, and logical/technical. More specifically, that means that medical offices and dental practices need to be aware and mindful of: - Keeping practice hardware and software secure and up-to-date, especially those that use or access a patient’s Electronic Health Record (EHR) - Creating, maintaining, and reviewing practice security procedures and protocols, including training all staff - Creating physical barriers between to protect on-premise servers and limiting physical access to computers that store ePHI and practice data - Limiting or restricting digital access to EHRs   - Creating, establishing, and enforcing data use agreements with all third party vendors  While HIPAA has other specific data security rules, this is the foundation. Keeping patient data and EHRs secure is a full-practice effort and any one of these pieces missing can create significant security risks. ## ![Doctor sits at secure laptop entering information 539802197](https://blog.icoreconnect.com/hs-fs/hubfs/AdobeStock_539802197.jpeg?width=600&height=399&name=AdobeStock_539802197.jpeg)What does HIPAA Compliance Require of Medical and Dental Practices While adhering to the requirements set forth in the Security Rule is a great start, it’s not enough. Just doing those things will not help you achieve HIPAA compliance. In fact, there are distinct foundational rules medical and [dental practices](https://www.healthit.gov/sites/default/files/pdf/privacy/onc_privacy_and_security_chapter4_v1_022112.pdf) will need to adhere to on top of the above. The others include: **The** [**Privacy Rule**](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html#:~:text=With%20limited%20exceptions%2C%20the%20HIPAA,care%20providers%20and%20health%20plans.)- A close second to the security rule as this requires proactive efforts to maintain patient privacy. This assures patients that personally identifiable information (PII) will be kept secure and private. **The** [**Breach Notification Rule**](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html)**-** Dental or medical providers must inform their patients of data breaches or compromises of data integrity related to protected health information (PHI/ePHI).  The final rule is referred to as the [**Omnibus Rule**](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/combined-regulation-text/omnibus-hipaa-rulemaking/index.html)**.** It modifies and encompasses all of the other rules while adding on the [HITECH Act](https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html)which recommends dental practices switch to EHR and includes the [Genetic Information Nondiscrimination Act (GINA)](https://www.eeoc.gov/statutes/genetic-information-nondiscrimination-act-2008). These are, of course, the overarching rules and, from there, they filter down into everyday procedures and protocols, including requiring things like [HIPAA compliant email](https://blog.icoreconnect.com/articles/hipaa-compliant-email-requirements). Understanding the massive amount of detail included in all of these complex and intersecting regulations practically requires a special degree, one which isn’t offered in dental school. Plus, actually achieving HIPAA compliance demands a solid and detailed understanding of your practice’s IT infrastructure. In the midst of trying to run your practice, and dealing with staffing shortages, finding the resources to focus on IT and security can be a challenge. However, if you know where to focus those resources, it can save you time, effort, and money. ## What is a HIPAA Security Risk Assessment (SRA)? A HIPAA SRA is performed by a third party and is designed to identify [vulnerabilities and risks](https://blog.icoreconnect.com/articles/the-real-cost-of-hipaa-vulnerabilities) to ePHI associated with the three aforementioned security requirements (administrative, physical, logical). More specifically, a risk assessment like the one provided by iCoreConnect’s [iCoreHIPAA](https://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) will provide: - Detailed explanations, definitions, and examples of your hardware, software, and administrative risks and vulnerabilities  - An audit-ready final report with recommended, risk-stratified remediation actions so you have a plan to address concerns - Dashboard tools to streamline that plan and allow you to collaborate with and directly assign tasks to team members - Templates to build data governance and HIPAA compliant policies appropriate to your organization - Staff training resources with progress tracking This way you can be sure you’re addressing any security gaps as well as building a proactive plan to prevent issues *before* they happen.  ## ![HIPAA Security demonstrated by blue icons340541840](https://blog.icoreconnect.com/hs-fs/hubfs/AdobeStock_340541840.jpeg?width=600&height=400&name=AdobeStock_340541840.jpeg)Why Your Practice Needs a HIPAA Security Risk Assessment The HIPAA Security Rule *requires* that “[covered entities](https://www.healthit.gov/faq/who-must-follow-hipaa)”–like medical and dental practices–conduct a risk assessment of their organization. Even so, one of the biggest reasons most medical offices and dental practices need a third-party HIPAA security risk assessment is that, simply put, most organizations don’t have the expertise or resources. Larger organizations may have an IT team, but a full risk assessment can be time consuming and often involves more than just an in-depth analysis of hardware and software. More specifically, one of the [biggest security risks](https://blog.icoreconnect.com/articles/top-hipaa-security-risks-and-how-to-reduce-them) and challenges organizations of every size face is human error. That means comprehensive staff training is a vital component of any HIPAA security plan. For smaller organizations, nearly every aspect of a risk assessment can seem daunting and overwhelming. Understanding physical and logical security needs requires experience and expertise, and it’s likely that staff is already consumed by business and practice-critical tasks and responsibilities. In short, a [HIPAA Security Risk Assessment](https://www.icoreconnect.com/hipaa-risk-assessment-icorehipaa) can help you identify your weaknesses and develop a plan to address them without sacrificing time and resources to both initiatives. And, as noted above, a comprehensive plan includes more than just ensuring software is patched and up-to-date. You’ll want to include everything from developing policies and procedures to training staff and ensuring the physical security of any on-site servers. In fact, your solution may just include investigating how [cloud based solutions](https://blog.icoreconnect.com/articles/how-the-cloud-can-solve-healthcare-security-challenges) can help improve your security stance. Regardless, with the ongoing [security threats](https://blog.icoreconnect.com/articles/cybersecurity-threats-to-dental-practice) and the need to ensure HIPAA compliance, a risk assessment can help you identify your risks and address the gaps in your security. In the long run, you’ll better protect patients and avoid ending up on the very real [HIPAA Wall of Shame](https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf)! If you’re ready to take your security to the next level and ensure the safety of your patients and practice, [reach out](https://www.icoreconnect.com/cs/c/?cta_guid=0cb898be-8b3a-4df0-a502-81718c12a984&signature=AAH58kG6OfYCu6jnlE55ndKMkwntM5sPqg&pageId=65367553425&placement_guid=f664d53a-9e04-422f-880f-0c0d21989676&click=bb5065ec-6409-4cc9-ad82-65f72be810b2&hsutk=4eddc951ee666870d6f1ad5d506c8964&canon=https%3A%2F%2Fwww.icoreconnect.com%2Fdemo&utm_referrer=https%3A%2F%2Fwww.icoreconnect.com%2F&portal_id=7112411&redirect_url=APefjpFwpJAZlnP2kprUieTubbW7bkHoV6OzsfSWq1bIyqTFZwUfEYtEb4_9zzg58XNj110NUJ_Axl4p06SLA53fftKb_3ojEPDazoFp9gl59Q2aD7HBlX3ZiyreZzEF9jJ_lNqwcqs6zTmZMiEwbT8xX-_Muj9oozVksdmTpCltpH-fGdVohdA-5SfkN9fWD-GrTEOZTpMLSJLykdzakqcOU7G2j10TvSrTka3FpwOM883FGz0BCCrjiOGjVJIqhY1i6K1jYyM2IUhGg67Y13nLZNNQyCDZSJitXk-NimwFnSC3lbZUPAI&__hstc=28257251.4eddc951ee666870d6f1ad5d506c8964.1657913331002.1686322679521.1686325789717.237&__hssc=28257251.2.1686325789717&__hsfp=4188686977&contentType=standard-page) to the iCoreConnect team today and let’s get started. [![Are you HIPAA Compliant - Contact Sales!](https://no-cache.hubspot.com/cta/default/7112411/8a8e3915-71e5-4a4c-ae96-110485b5f7c6.png)](https://cta-redirect.hubspot.com/cta/redirect/7112411/8a8e3915-71e5-4a4c-ae96-110485b5f7c6) - [Tweet](https://twitter.com/share) [![Using Patient Education Videos to Support Preventive Care Strategies](https://blog.icoreconnect.com/hubfs/healthcare%20provider%20showing%20patient%20education%20video%20on%20a%20tablet.jpeg)](https://blog.icoreconnect.com/articles/patient-education-videos-for-preventive-care) #### [Using Patient Education Videos to Support Preventive Care Strategies](https://blog.icoreconnect.com/articles/patient-education-videos-for-preventive-care) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott): Jun 5, 2025, 1:00:01 PM As a healthcare provider, you know prevention saves lives. From routine screenings and lifestyle counseling to vaccinations and early detection,... [Treatment Plan Adherence](https://blog.icoreconnect.com/articles/tag/treatment-plan-adherence) [Patient Education](https://blog.icoreconnect.com/articles/tag/patient-education) [Patient Care](https://blog.icoreconnect.com/articles/tag/patient-care) [Read More](https://blog.icoreconnect.com/articles/patient-education-videos-for-preventive-care) [![AI in the Healthcare Industry: Separating Innovation from Intimidation](https://blog.icoreconnect.com/hubfs/ai%20in%20the%20healthcare%20industry%20for%20practice%20efficiency.jpeg)](https://blog.icoreconnect.com/articles/ai-in-the-healthcare-industry-hesitations) #### [AI in the Healthcare Industry: Separating Innovation from Intimidation](https://blog.icoreconnect.com/articles/ai-in-the-healthcare-industry-hesitations) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott): May 29, 2025, 1:00:00 PM There’s no denying that the AI boom is here. The American Medical Association reports that 66% of physicians are currently using artificial... [Healthcare Workflow](https://blog.icoreconnect.com/articles/tag/healthcare-workflow) [Automation](https://blog.icoreconnect.com/articles/tag/automation) [Read More](https://blog.icoreconnect.com/articles/ai-in-the-healthcare-industry-hesitations) [![Using Predictive Practice Analytics to Forecast Revenue and Optimize Your RCM](https://blog.icoreconnect.com/hubfs/dental%20practice%20staff%20memeber%20reviewing%20predictive%20practice%20analytics.jpeg)](https://blog.icoreconnect.com/articles/predictive-practice-analytics-for-rcm) #### [Using Predictive Practice Analytics to Forecast Revenue and Optimize Your RCM](https://blog.icoreconnect.com/articles/predictive-practice-analytics-for-rcm) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott): May 22, 2025, 1:00:00 PM If only managing your practice’s revenue cycle came with a crystal ball. You could spot claim denials before they happen, predict when patients might... [Practice Analytics](https://blog.icoreconnect.com/articles/tag/practice-analytics) [Read More](https://blog.icoreconnect.com/articles/predictive-practice-analytics-for-rcm) [![What's Really Required of HIPAA Compliant Email](https://blog.icoreconnect.com/hubfs/AdobeStock_212731241.jpeg)](https://blog.icoreconnect.com/articles/hipaa-compliant-email-requirements) #### [What's Really Required of HIPAA Compliant Email](https://blog.icoreconnect.com/articles/hipaa-compliant-email-requirements) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott) : Dec 8, 2022, 11:30:00 AM Even though most of us understand the importance of HIPAA regulations, it doesn’t change the fact that, for many, compliance has been a hurdle at... [HIPAA Compliance](https://blog.icoreconnect.com/articles/tag/hipaa-compliance) [Cybersecurity](https://blog.icoreconnect.com/articles/tag/cybersecurity) [Read More](https://blog.icoreconnect.com/articles/hipaa-compliant-email-requirements) [![Top HIPAA Security Risks and How To Reduce Them](https://blog.icoreconnect.com/hubfs/AdobeStock_273111348.jpeg)](https://blog.icoreconnect.com/articles/top-hipaa-security-risks-and-how-to-reduce-them) #### [Top HIPAA Security Risks and How To Reduce Them](https://blog.icoreconnect.com/articles/top-hipaa-security-risks-and-how-to-reduce-them) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott) : Jan 5, 2023, 12:00:00 PM Few things changed healthcare quite like the digital transformation of modern business. Yet, we all know that, with the potential for improved... [HIPAA Compliance](https://blog.icoreconnect.com/articles/tag/hipaa-compliance) [Read More](https://blog.icoreconnect.com/articles/top-hipaa-security-risks-and-how-to-reduce-them) [![Why Your Practice Needs to Prioritize Risk Assessment](https://blog.icoreconnect.com/hubfs/AdobeStock_209641965.jpeg)](https://blog.icoreconnect.com/articles/prioritizing-practice-risk-assessment) #### [Why Your Practice Needs to Prioritize Risk Assessment](https://blog.icoreconnect.com/articles/prioritizing-practice-risk-assessment) [Robert McDermott](https://blog.icoreconnect.com/articles/author/robert-mcdermott) : Oct 20, 2022, 12:00:00 PM The word “HIPAA” is so commonplace these days that you may not give HIPAA compliance much thought. You may be fairly confident you’re doing all the... [Cybersecurity](https://blog.icoreconnect.com/articles/tag/cybersecurity) [Read More](https://blog.icoreconnect.com/articles/prioritizing-practice-risk-assessment) - [iCoreRx](http://www.icoreconnect.com/icorerx) - [iCoreVerify](http://www.icoreconnect.com/icoreverify) - [iCoreAnalytics](http://www.icoreconnect.com/icoreanalytics) - [iCoreExchange](http://www.icoreconnect.com/icoreexchange) - [iCoreCloud](http://www.icoreconnect.com/icorecloud-healthcare) - [iCoreIT](http://www.icoreconnect.com/icoreit-healthcare) - [iCoreCodeGenuis](http://www.icoreconnect.com/icorecodegenius-dental) - [About iCoreConnect](http://www.icoreconnect.com/about) - [Careers](https://icoreconnect.betterteam.com/) - [Endorsed By](http://www.icoreconnect.com/relationships) - [Become a Reseller](http://www.icoreconnect.com/cp-reseller-inquiry) - [News & Releases](http://www.icoreconnect.com/news) - [Whitepapers](http://www.icoreconnect.com/resources) - [Blog](https://blog.icoreconnect.com/articles) - [Contact Us](http://www.icoreconnect.com/contact)    ![Top 10 Dental Solution - Healthcare Tech Outlook Award Logo](https://blog.icoreconnect.com/hubfs/GRFX/Awards/award_healthcare_tech_top_10.svg)![Top 25 IOT Solution Providers - CIO Applications Award Logo](https://blog.icoreconnect.com/hubfs/GRFX/Awards/award_cio_applications_wht_bkg.svg)![Top 50 Products - DPR Award Logo](https://blog.icoreconnect.com/hubfs/GRFX/Awards/award_dpr_top50_2.23.22.svg)   ![Top 10 Encryption - Enterprise Security Award Logo](https://blog.icoreconnect.com/hubfs/GRFX/Awards/award_ent_ecurity_top10-01.svg) ![Startup Health Partnership Logo](https://blog.icoreconnect.com/hubfs/GRFX/Awards/startup_health_logo.svg)   [![iCoreConnect Logo](https://blog.icoreconnect.com/hubfs/GRFX/Logos/Company%20Logo/iCoreConnect/ICCT_logo_for_DRK_BKGND.svg)](http://www.icoreconnect.com/old) - [Legal Terms & Privacy Policy |](http://www.icoreconnect.com/terms) - 1.888.810.7706 © 2026 iCoreConnect is committed to the specific needs of each customer. Features are subject to change based on availability, customer needs, plans and discounts when applicable. All integrations with third parties, including insurance payers, practice management software, etc. are limited to the data provided by those parties. All sales are subject to our [terms](https://www.icoreconnect.com/terms), which shall take precedence. [Facebook](https://www.facebook.com/iCoreConnect)[X](https://twitter.com/iCoreConnect)[Linkedin](https://www.linkedin.com/company/icoreconnect) Return to top