HIPAA Risk Assessments – A Necessary Evil

by ih-coc admin
Not only are HIPAA risk assessments a necessary evil but also a regulatory requirement. This requirement is found in the HIPAA Security Rule implementation specification, § 164.308(a)(1)(ii)(A).