According to the HIPAA Security Rule Security Risk Assessment (SRA) Tool, Technical Safeguards, you can: