On Monday, the HHS Office of Civil Rights (OCR) released its third resolution and settlement agreement in as many weeks. The $750,000 settlement with the University of Washington Medicine (“UWM”) is yet another citing the alleged failure to conduct an enterprise-wide risk analysis as required by the HIPAA Security Rule. As part of the settlement,