HIPAA compliance is more than simply checking boxes and meeting the minimum audit requirements. You should ensure your web applications are secure and use the compliance act as a guideline.