In a March 28, 2014, news release, HHS  announced that a new security risk assessment (SRA) tool is available to help health care providers in small to medium-sized offices conduct HIPAA compliance risk assessments.  The SRA tool’s website  includes, among other things, an application available for downloading, videos to help providers to start using the tool, and videos on risk analysis and contingency planning.