Knowledge Share: Security Risk Assessment Tool The Most of our providers are challenged by performing an annual security risk assessment. Fortunately, the Office of the National Coordinator of Health Information and Technology (ONC) offers a solution and has updated their free Security Risk Assessment Tool. You can click here and download it from the HealthIT.gov website. The ONC worked with the HSS Office of Civil Rights (OCR) to develop this tool which will help guide you through the security risk assessment process as required by the HIPAA Security Rule and the CMS EHR Incentive program. Our hope is that this tool will help you achieve this challenging task.