Measure: Conduct or review a security risk analysis (SRA) to identify which security policies and procedures are in place and risks that need to be addressed. The analysis must be documented in a security risk analysis report.
Exclusion Available?
No
From CMS:
From Open Dental:
This is a Yes/No measure and not based on a percentage calculation.
The security risk analysis should occur prior to, or during, your first reporting period, and then again for each subsequent reporting period.
