Which information locations in covered entities under HIPAA must be secured first? A multi‐criteria decision‐making approach
Journal of healthcare risk management (Online)/Journal of healthcare risk management