Security Risk Assessment

You are responsible for your Security Risk Assessment.
Here is some information you may find useful from www.healthit.gov

  SRA tool users guide