The Department of Health and Human Services Office for Civil Rights (OCR) just sent another clear message to healthcare organizations: failing to conduct proper HIPAA risk analysis [...]