The most useful HIPAA security document a small practice can produce costs nothing, comes from the federal government, and takes about two afternoons. Most practices have never opened it. They either ...