HHS updates a free risk tool to help hospitals size up their cybersecurity exposure