<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://medcurity.hashnode.dev</loc>
    <lastmod>2026-09-07T01:31:47.092Z</lastmod>
    <changefreq>always</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/if-you-re-a-healthcare-vendor-a-signed-baa-is-the-start-of-your-hipaa-job-not-the-end</loc>
    <lastmod>2026-08-31T20:50:31.196Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/the-business-associate-inventory-nobody-keeps</loc>
    <lastmod>2026-08-27T02:58:03.348Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/hipaa-compliance-for-business-associates-what-vendors-handling-phi-need-in-2026</loc>
    <lastmod>2026-08-21T19:11:41.193Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/soc-2-is-not-hipaa-choosing-between-horizontal-grc-and-healthcare-native-sra</loc>
    <lastmod>2026-08-04T05:06:12.237Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/a-hospital-hipaa-risk-analysis-is-not-an-evidence-scan-why-45-cfr-164-310-requires-someone-onsite</loc>
    <lastmod>2026-07-29T05:22:48.609Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/physical-safeguards-are-in-scope-for-your-sra-a-questionnaire-cannot-assess-them</loc>
    <lastmod>2026-07-20T19:22:38.193Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/multi-site-hipaa-security-risk-analysis-one-engagement-every-location</loc>
    <lastmod>2026-07-17T23:00:52.589Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/the-2026-hipaa-risk-assessment-pattern-for-healthcare-apis</loc>
    <lastmod>2026-06-12T03:33:49.227Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/building-a-baa-inventory-system-that-holds-up-under-a-2026-hipaa-audit</loc>
    <lastmod>2026-06-01T18:33:50.816Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/why-horizontal-grc-platforms-miss-the-half-of-hipaa-that-actually-fails-an-audit</loc>
    <lastmod>2026-05-29T02:55:19.272Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/a-2026-hipaa-risk-assessment-pattern-for-healthcare-apis</loc>
    <lastmod>2026-05-28T03:02:48.532Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/how-we-picked-our-hipaa-security-risk-assessment-tool-in-2026-engineering-first-notes</loc>
    <lastmod>2026-05-20T02:50:55.486Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/logging-api-calls-in-telehealth-platforms-a-2026-hipaa-compliant-pattern</loc>
    <lastmod>2026-05-08T20:01:17.026Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/the-ocr-enforcement-playbook-for-fqhcs-in-2026-what-developers-actually-need-to-know</loc>
    <lastmod>2026-04-29T18:14:17.578Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/baa-annual-verification-the-2026-hipaa-update-s-most-underrated-workflow</loc>
    <lastmod>2026-04-25T22:18:39.884Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/hipaa-security-risk-analysis-at-90-days-what-the-2026-rule-actually-changed-in-practice</loc>
    <lastmod>2026-04-25T00:42:34.090Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/hipaa-compliant-architecture-multi-site-chc-guide</loc>
    <lastmod>2026-04-21T16:01:49.117Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/securing-healthcare-apis-hipaa-technical-safeguards-in-practice</loc>
    <lastmod>2026-04-21T06:43:01.717Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/building-a-hipaa-compliant-asset-inventory-in-2026-the-engineer-s-guide</loc>
    <lastmod>2026-04-21T06:29:23.656Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/rural-healthcare-it-security-in-2026-building-hipaa-compliance-on-a-shoestring-budget</loc>
    <lastmod>2026-04-14T17:05:02.717Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/building-hipaa-compliant-systems-for-multi-site-community-health-centers</loc>
    <lastmod>2026-04-13T18:09:31.894Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/the-2026-hipaa-security-rule-what-every-healthcare-it-team-needs-to-know</loc>
    <lastmod>2026-04-08T22:14:25.483Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/archive</loc>
    <lastmod>2026-09-07T01:31:47.092Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://medcurity.hashnode.dev/recommendations</loc>
    <lastmod>2026-09-07T01:31:47.092Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.4</priority>
  </url>
</urlset>