Day: October 24, 2025

This week, a client needed a HIPAA Security Risk Assessment. In the past, I’ve used a free tool published by the Office of the National Coordinator for Health Information Technology (ONC) and the Health and Human Services (HHS) Office for Civil Rights (OCR), aptly named the [HIPAA] “Security Risk Assessment Tool”.

When I tried to download it, I was met with a permanent (and unhelpful) redirect:

I didn’t have a local backup and couldn’t find any mirrors or alternative download sites. As I was about to give up and look for other options, I decided to give the Internet Archive Wayback Machine a go.

After browsing through dozens of snapshots, I located a working cache of the SRA Tool MSI package (version 3.5.1, one version before the current release).

• SRA Tool for Windows v3.5.1 (MSI Package)
• SRA Tool Excel Workbook
• SRA Tool User Guide (PDF)

Hopefully, this helps someone out there!