For 2026, the updated HIPAA Security Rule will now explicitly mandate annual penetration testing for all covered entities and business associates. Vulnerability scans are now required to be executed semiannually. Penetration tests - annually. No exceptions, no flexibility, no more documentation on...
