- I know one company in SV that has done that for regulatory reasons, at huge, on-going financial expense. It's not normal. - if you have engineers with previo

- I know one company in SV that has done that for regulatory reasons, at huge, on-going financial expense. It's not normal. - if you have engineers with previous implementation experience on HITRUST or similar, it can be done. But it's hard to retrofit if everything that's installed is stale. - otherwise you end up with "paper certifications" without the engineering to support it. That works for a while, but eventually becomes a problem if an on-site audit is scheduled. https://en.wikipedia.org/wiki/HITRUST https://en.wikipedia.org/wiki/HITRUST