The Security Risk Assessment Tool (SRA Tool) is designed to help health care practices to evaluate risks, vulnerabilities and adherence to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.  This is only a tool to assist in practice’s review and documentation of a risk assessment, and therefore is only as useful as the work that goes into performing and recording the risk assessment process. Use of this tool does not mean that your practice is compliant with the HIPAA Security Rules or other federal, state or local laws and regulations.