I learned a lot from the HIPAA tutorial. I learned that the final security rule is required for a covered entity to meet four basic requirements. The four requirements are: to ensure the confidentiality, integrity and availability of all e-PHI’s created, received. Maintained or transmitted; protect against any reasonably anticipated threats or hazards to the security or integrity of e-PHI; protect against any reasonably anticipated uses or disclosures of e-PHI that are otherwise not permitted or required by the Privacy Rule; and to ensure compliance with the rule by its workforce (HIPAA Security Basics: Health Care Workforce, 2004-2010). I also learned that trying to make everything secure is not possible. The HIPAA tutorial also taught me that experiences have shown that about 80% of benefits can be derived from 20% of the cost (HIPAA Security Basics: Health Care Workforce, 2004-2010). According to the HIPAA tutorial, there are many technologies that implement and enhance security. Those technologies are: firewalls, virtual private networks (VPN’s), intrusion detection systems, intrusion prevention technology, virus detection, content filtering, cryptography, and public key infrastructure (PKI’s). I learned many more various important information from the HIPAA tutorial. For example: the HIPAA law was passed in August of 2002 and it requires a covered entity to secure patient records containing individually identifiable health information so that the confidentiality of the information is protected (HIPAA Security Basics: Health Care Workforce, 2004-2010). Another thing I learned was the six steps to comply and document each process. Also throughout the tutorial it discussed various information about risk assessments, distributed denial of services, password attacks, the number of password attacks, the different types of hackers, viruses, and breaches and