Now that healthcare organizations are several years past Health Insurance Portability and Accountability Act of 1996 (HIPAA) compliance deadlines, information security experts in the sector are taking the experience and the tools gained through compliance efforts to maximize their security programs in 2007.