With the passage of the Omnibus Final Ruling in September, 2013, many healthcare IT directors were faced with a seemingly simple question by their organizations' senior management: "are we or aren't we HIPAA Compliant ."