The Office of the National Coordinator for Health Information Technology (ONC) and Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) have released version 3.3 of the HHS Security Risk Assessment (SRA) Tool. (HIPAA context)
https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool