A risk assessment is exactly as it sounds; it’s a tool that assesses risk. That “risk” could come from many different places, and an institution might complete a variety of different risk assessments. Risk assessments are a key component of your CMS and they “drive” everything else. For instance, risk assessments drive your policies and procedures, they drive your training efforts, your monitoring, audits, etc. You want a risk assessment to identify what the risks are and where they come from.
Jerod explains more in the video.
Published 2026/01/15
