Managing Risks under HIPAA – HITECH for 2017 and beyond