Step Two: Conduct a Risk Analysis Before Writing Any Code
The HIPAA Security Rule explicitly requires a thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI. This isn't bureaucratic box-checking. A proper risk analysis...