Failure to secure protected health information (i.e., failure to comply with HIPAA)

Control

Training and awareness program