Most people on the board have used the ONC Risk Analysis tool to identify and manage security risks:
http://www.texmed.org/WorkArea/DownloadAsset.aspx?id=25071