Create a timeline and delegate tasks (compliance automation software will make this activity a lot less time consuming) Create firewalls and router benchmarks, which set regulations for enabling and denying entry to your units. Firewall configurations needs to be reviewed bi-yearly to make sure there isn't any defective obtain principles, https://www.nathanlabsadvisory.com/hipaa-hitech-compliance.html