The proposed HIPAA Security Rule introduces mandatory measures to prevent malicious cyberattacks in health care.