Understanding the HIPAA Security Rule: Why an Annual Security Risk Assessment (SRA) Is Mandatory—and How It Protects Your Practice