01/15/2026

Cybersecurity Step One: A HIPAA Security Risk Analysis

Cybersecurity threats remain a daily reality for aging services providers, making preparation and continuous improvement essential. One foundational step is completing a HIPAA Security Rule risk analysis, a systematic review of where electronic protected health information is stored, how it flows through an organization, and where vulnerabilities exist. To support that work, the Office of the National Coordinator for Health Information Technology offers a free HIPAA Security Risk Assessment Tool.

 LeadingAge members can also find additional cybersecurity education and resources through CAST to support informed planning and stronger resilience.