Question: is a risk assessment optional?
Answer: The short answer is: unlike popular belief, a HIPAA Security Risk Analysis Assessment is not optional. ... A risk assessment can also help to identify areas where protected health information (PHI) that the TAS processes and stores could be at risk — allowing it to take corrective action.