. . "Can you readily produce documentation supporting role based access, systems activity review, business associate contracting, training and other matters covered by the HIPAA rules? ??? Subject Matter Experts: OCR will expect you to know which individuals in your organization can speak to each aspect of HIPAA implementation." . .