The increased focus on HIPAA compliance and anticipated second round of audits makes clear the necessity for an organization to develop and implement comprehensive policies and procedures.