If you are looking for a solid review of the HIPAA Security Rule, I would suggest looking elsewhere. The breadth and depth of this chapter is very narrow (a mere 25 pages of shallow content) and I suspect it was actually written before the Final Security Rule was released in February of this year (2003). The frameworks for assessing Security Policicies and Procedures are nearly non-existent. While the book does have some solid HIPAA content, it's definitely not geared towards accurately assessing one's HIPAA Security Posture.