Security Risk Assessment
You are responsible for your Security Risk Assessment.Here is some information you may find useful from www.healthit.gov
SRA tool users guide
Download SRA Tool Software