While healthcare systems universally complete an HVA, a CMS requirement, the HVA alone does not define what the system must be able to do. FEMA’s Threat and Hazard Identification and Risk Assessment ...