New Risk Assessment Reveals Mandatory HIPAA Compliance Vulnerabilities and Corrective Actions to Avoid HIPAA Penalties