Compliance Security
HIPAA Security Rule Risk Analysis: Required Steps and Documentation Checklist

Ask most health care IT teams whether their organization has a HIPAA risk analysis and the answer is usually yes.

Compliance
15 Million Records, a $10,000 Fine, and a Company That No Longer Exists: What the MMG Fusion Settlement Means for Your Vendor Relationships

On March 5, 2026, the U.S.

Security Compliance Leadership
Risk Management Joins Risk Analysis Scrutiny

OCR's Risk Analysis Initiative has now produced 12 enforcement actions, and the program is expanding.

Security Compliance Leadership
OCR Enforcement 2025-2026: Why Incomplete Security Risk Analyses Are Still the #1 Settlement Driver

Picture this.

Compliance
"I Don't Touch PHI" - The Rural Health Care Administrator's Blind Spot

The CEO sits across from the IT team and says it with confidence: "I don't have patient information on my device.

Subscribe to OCR Enforcement