Healthcare providers must assure patients the utmost security, confidentiality, and integrity of sensitive information. This means maintaining total HIPAA compliance within their organization, including healthcare IT infrastructure. This white paper elucidates HIPAA compliant IT infrastructure, from physical and environmental controls, to appropriate guidelines between a Covered Entity and data center provider when outsourcing. It also helps clarify key points including service provider qualifications, and why Business Associate Agreements are integral for establishing accountability with partners.