The office had a HIPAA Security Expert came over to do the Risk Assessment in the past year. Wonder if it is mandatory to have it completed for Meaningful Use or Medicare(CMS) on yearly base. I will appreciate for any input.