Every year, clinics face the same scenario: technology and security vendors urging you to spend thousands on a HIPAA Security Risk Assessment (SRA). Vendors use the SRA in pitches that often rely on Fear, Uncertainty, and Doubt (FUD) to upsell additional products and services. Here’s the reality: the annual HIPAA SRA is required, but it’s almost worthless. Worse, the real…
