HIPAA penetration testing: how a test satisfies the Security Rule’s risk analysis and evaluation, and why continuous beats an annual snapshot.