The structural half of a risk analysis — asset-threat pairing, likelihood baselines, scoring drafts — is the slow, repetitive part. AI Risk Analysis handles that so a Security Officer spends time on judgement, not spreadsheets. Human approval remains the gate.
What it does
- Suggests asset-threat pairings from the inventory and a current threat library.
- Drafts initial likelihood and impact scores with rationales, for human adjustment.
- Flags where the draft needs judgement (addressable rationales, controversial residual risk).
- Produces an audit-ready methodology record of what the AI contributed and what the human changed.
How it maps to HIPAA
The feature accelerates §164.308(a)(1)(ii)(A) (risk analysis), feeds §164.308(a)(1)(ii)(B) (risk management), and preserves the human-decision quality OCR expects.
Where it fits
AI Risk Analysis is an AI module capability built on top of the Risk Analysis Workflow. For the fixed-fee delivered-by-us version, see the HIPAA Risk Analysis service.