GAO Report on Privacy and Security: A Wake-Up Call for HHS?

It’s Time to Recognize Healthcare as One of the 16 Critical Infrastructure Sectors
Over the years, HHS has released several guidance documents, but all are weak and without mandates as it relates to identity management and authentication of entities accessing protected health information. Guidance typically includes words like “may” and “should,” but rarely include words like “shall” or “must.”