HIPAA and IT: The 4 key factors