...

Purpose

This document establishes guidelines for risk analysis and management of ePHI (Electronic Personal Health Information). Risk management is an ongoing process to determine the value of assets and the corresponding exposure to threats and vulnerabilities. Information produced during the risk assessment will be used to determine and manage security controls for our ePHI resources.

...