1 HIPAA Security Compliance: The critical role of Risk Analysis and Risk Management April 22, 2002 Tom Grove, Director Phoenix Health Systems.