The current HIPAA Security rule defines Risk Analysis as: “Conducting an accurate and thorough assessment of the potential risk and vulnerabilities to the confidentiality, integrity and ...