"[HHS] released an updated version of the Security Risk Assessment Tool (SRA Tool), which is an easy-to-use interactive application that covered entities and business associates can use to create the required security risk assessment.... Employer plan sponsors of group health plans can partner with their internal IT teams to create the required 'security risk assessment' using the SRA Tool -- and significantly reduce their exposure to potential fines and penalties[.]"  MORE >>