Oct 24, 2014 · Enable portals that have integrated security features – This should include user authentication, role-based authorization and single sign-on capabilities. Conduct a comprehensive security assessment – A comprehensive risk assessment is required under the HIPAA security rule and meaningful use. Risk assessments should include assessing the risk posed by patient ….