Risk analysis helps see and assess risks to e-PHI. It helps decide what security actions are needed based on those risks.