2026 MIPS Promoting Interoperability PI_PPHI_1: Security Risk Analysis
Written by Tucker Deyett, Dedicated Advisor, ReportingMD. Source data: CMS Quality Payment Program 2026 measure specifications and benchmark files.
Objective: Protect Patient Health Information Required
At a glance
PI_PPHI_1, Security Risk Analysis, is a 2026 Promoting Interoperability required measure under the Protect Patient Health Information objective, reported as a yes/no attestation.
Measure description
First, conduct or review a security risk analysis; and second, conduct security risk management activities, in accordance with the requirements under 45 CFR 164.308(a)(1)(ii)(A) and (B). Security risk analysis and management activities include addressing the security of data created or maintained by CEHRT (to include encryption), in accordance with 45 CFR 164.312(a)(2)(iv) and 45 CFR 164.306(d)(3). The encryption implementation specified at 45 CFR 164.312(a)(2)(iv) must be implemented if it is reasonable and appropriate; if encryption is not reasonable and appropriate, then the MIPS eligible clinician would adopt an equivalent alternative measure if it is reasonable and appropriate to do so.
Measure details
- Measure ID: PI_PPHI_1
- Objective: Protect Patient Health Information
- Reporting category: Required
- Metric type: Yes/No attestation
- Required: Yes
- Bonus: No
- Programs: MSSP, Traditional MIPS, APP, APP Plus
- First performance year: 2017
MVPs that include this measure
Advancing Rheumatology Patient Care; Coordinating Stroke Care to Promote Prevention and Cultivate Positive Outcomes; Advancing Care for Heart Disease; Adopting Best Practices and Promoting Patient Safety within Emergency Medicine; Improving Care for Lower Extremity Joint Repair; Patient Safety and Support of Positive Experiences with Anesthesia; Advancing Cancer Care; Optimal Care for Kidney Health; Quality Care for Patients with Neurological Conditions; Value in Primary Care; Focusing on Women’s Health; Quality Care for the Treatment of Ear, Nose, and Throat Disorders; Prevention and Treatment of Infectious Disorders Including Hepatitis C and HIV; Quality Care in Mental Health and Substance Use Disorders; Rehabilitative Support for Musculoskeletal Care; Complete Ophthalmologic Care; Dermatological Care; Gastroenterology Care; Optimal Care for Patients with Urologic Conditions; Pulmonology Care; Surgical Care; Diagnostic Radiology; Interventional Radiology; Neuropsychology; Pathology; Podiatry; Vascular Surgery
Official CMS specification
Need help with PI_PPHI_1?
ReportingMD is a CMS qualified registry and healthcare data pipe with a 100% submission rate since 2001. We review PI measure data and attestations with every client before submission. Talk to a ReportingMD advisor or browse the full 2026 MIPS directory.