4-So, you kept your security and risk management documentation, now what? | HIPAA Consulting Services for HIPAA Covered Entities | Business Associates | Subcontractors