The first objective of this Workgroup has been to address the anticipated needs for certificate policies and practices associated with the Ecosystem community, which is comprised of covered entities, their business associates, and other entities that have agreed to abide by HIPAA privacy and security rules and regulations.