---
id: 7898
title: "Pentesting: The Forgotten HIPAA Requirement"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/forgotten-hipaa-requirement/"
published_at: "2023-02-21T00:00:00Z"
tags: ["compliance", "penetration-testing", "healthcare", "risk-analysis", "hipaa", "regulatory"]
phying_url: "https://phying.com/item/7898"
lang: en
---

# Pentesting: The Forgotten HIPAA Requirement

## Summary

Penetration testing is an unwritten HIPAA Security Rule requirement: while never explicitly mandated, risk analysis provisions imply it amid rising OCR settlement fines for healthcare organizations.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2023-02-21T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/forgotten-hipaa-requirement/
- **Phying News:** https://phying.com/item/7898