Source: https://clearwatercompliance.com/hipaa-hitech-news/hipaa-and-it-security/hipaa-risk-analysis-tip-part-5-questions-answers-may-3rd-conversation-former-ocr-director-leon-rodriguez/