Playbook
Patient data is moving to the cloud and HIPAA mapping is not optional
A healthcare provider is moving clinical applications to Azure. The CIO needs every architecture pattern mapped to the relevant HIPAA controls before sign-off — encryption, access logging, classification of patient health information, and the kind of attestation that holds up under continuous audit.
Trigger — Cloud migration sign-off; HIPAA controls required.
Good outcome — Every clinical application in Azure has a clear line from its design to the HIPAA control it satisfies. The customer can pass a HIPAA audit without an emergency project each year.