Which element is NOT part of risk analysis?

Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization’s risk analysis.

Which element is NOT part of risk analysis?
A . Developing adequate communication with all contractors, interns, and staff in relation to the agency’s security policies
B. Assessing vulnerabilities of integrity and availability of electronic personal health information
C. Determining how client electronic personal health information confidentiality may be compromised
D. Determining barriers in existence to needed client electronic personal health information

Answer: A

Explanation:

Developing communication is not a function of risk analysis.