b"Covered entities and business associates struggling with HIPAA compliance should use the federal government's audit protocol as a helpful roadmap, says security specialist Bill Miaoulis."