Healthcare entities and their business associates (healthcare companies) have spent the better part of two decades navigating the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, and many still treat compliance as a one-time project that can be completed. These companies often start strong by conducting an initial security risk analysis, implementing policies and…