HIPAA
HIPAA Penetration Testing Requirements: What Healthcare Organizations Must Know
Does HIPAA Require Annual Penetration Testing? Yes — effectively. HIPAA's Security Rule (45 CFR §164.308(a)(8)) requires covered entities and business associates to perform "periodic" technical evaluations of security controls protecting ePHI. The regulation doesn't use the word "annual," but annual