Medcurity has a self-directed SRA tool that not only does a professional job, but can reasonably be done by an office manager, or even a busy physician executive. Just navigate to their site and register.
After paying a reasonable fee (be sure to use our discount code of "macramonitor"), you will be prompted through a series of well documented questions and activities. If you need help, web conference or phone support will get you through most issues. There is even an on-site support option for an additional fee.
Better yet, become a MACRA Monitor Subscriber, and Security Risk Assessment will be free.