The Patient Advocate Tracking System-Replacement was transferred to the cloud in 2023 and was not properly assessed for risk as it contains medical record access.