which of the following statements is true regarding HIPAA security?
a. all institutions must implement the same security measures
b. HIPAA allows flexibility in a way an institution implements the security standards
c. All institutions must implement all HIPAA implementation specifications
d. a security risk assessment must be performed every year
Answer: b