In the context of CCCP certification, what is the most important consideration when implementing healthcare compliance & hipaa?