1. With a partner, come up with a fictional practice that would subscribe to an EHR service rather than implementing its own system. You are responsible for coming up with a system for addressing HIPAA requirements.
2. With that same partner, determine how you would assign responsibility for the following HIPAA requirements:
   1. Deciding what access rights and privileges each user or user group should be assigned
   2. Configuring system accounts to restrict user access and privileges
   3. Screening, supervising, and training personnel on appropriate use of patient information
   4. Installing, maintaining, testing, and managing configuration of server security hardware and software
   5. Installing and updating malicious code-detection software
   6. Developing plans for emergency-mode operations and disaster recovery