Even though every health care organization is different and has different problems and different needs, most organizations face similar sets of security risks that must be mitigated. In fact, information from the US Department of Health and Human Services based on breaches and audits shows that the top five issues they find are similar to the ones voiced by the chief information officers of health care institutions.