The HIPAA Security Rule includes security requirements to protect patients' ePHI confidentiality, integrity, and availability. The Security Rule requires you to develop reasonable and appropriate security policies..