A detailed guide how HIPAA requirements can be combined with the NIST Risk Management Framework to create a methodical, repeatable, risk-based approach for selecting, specifying, and implementing security controls to adequately protect PHI. Leading to compliance with HIPAA legal requirements.