This article demonstrates the undeniable affect of a computer outage on a medical facility, and, therefore, why the limited constructs of HIPAA and its security rule are not enough to properly secure such a critical and sensitive environment.
Minutes and even seconds matter during a medical crisis. Having to divert patients to other, more distant facilities is unacceptable.