According to the OCR´s website “the tool’s features make it useful in assisting small and medium-sized health care practices and business associates”. This implies that it is not suitable for health plans, health care clearinghouses and larger organizations. Additionally, the tool assumes a certain level of knowledge and a that a number of measures have already been implemented to comply with Security Rule standards. If your organization is taking its first steps towards HIPAA compliance, you may find the tool too advanced for your needs.