Health Information Security provides consulting and activities, including risk analysis and risk mitigation, related to compliance requirements for systems, processes, and business units required to comply with the HIPAA Security rules, and works closely with the Office of General Counsel and the Health Sciences Privacy Office.