. "This process includes conducting an inventory of major applications and general support systems???any systems that process or store PHI. A major application is an application that is critical to an organization or stores PHI. Generally, the ???owner??? for a major application is the director of the department that is the primary user of the application." . . .