The ongoing staffing shortage and budget constraints are making it difficult to protect health information, but its possible to piece together an effective security strategy by aligning the necessary pieces.