I was reading through the HIPAA guidelines and it mentioned something about auditing almost everything that happens on the system. Is that standard practice wh

I was reading through the HIPAA guidelines and it mentioned something about auditing almost everything that happens on the system. Is that standard practice when doing HIPAA development?