This guide covers general configuration and compliance-process guidance. It is not legal advice. Whether your organization is HIPAA compliant depends on your specific PHI handling, your own risk analysis, and your legal counsel. Use this as a starting point for that...