SFOR should already have a leg up on becoming HIPPA compliant with the use of its own software packages as a defense against PHI breeches. It shouldn't be a big deal at all, and I agree with others...SFOR should have already been HIPPA compliant. I'm guessing SFOR has an interested health system (such as one or more hospitals with affiliate clinics) - maybe they are having to prove to the health system they are fully HIPPA compliant through a couple/few different meetings (which is maybe why it is dragging out to weeks whereas everyone can meet). I've been in a couple of situations years ago with health systems and the biggest thing to convince their administration and their attorney is to TRUST. It took several meetings to get our proven services into their health system. So, maybe if SFOR is dealing with a health system - maybe that is why there is a delay. Who knows for sure?