Cybersecurity and Privacy

Sample Risk Assessment for Cloud Computing in Healthcare

Cloud-related risk assessment is a critical part of your healthcare organization's IT infrastructure risk assessment process. 

Use our Sample Risk Assessment for Cloud Computing in Healthcare, a tool created to help organizations understand the types of internal risks you may be facing when contracting with a cloud service provider.

This Risk Assessment tool has three sections:

  • Cloud Computing Application Inventory –  identify information you have stored in the cloud
  • Cloud Computing Risk Assessment Report – catalogue and prioritize vulnerabilities and risks, assign remediation controls and ownership
  • Prioritize Identified Risks - assess the likelihood, impact, and risk levels for each vulnerability 

Originally published March 4, 2013; Updated August 14, 2020