Administrative Safeguards1 of 15
Has your organization designated a HIPAA Security Officer?
This is the single person accountable for your security program. In small orgs the owner can fill the role, but it must be formally documented — not just assumed.
HIPAA Reference: §164.308(a)(2)