The new NFPA 99 Security Management Standard for healthcare facilities requires a Security Vulnerability Analysis be conducted annually, the author reports. This will usually uncover little change from year to year, he says, but by using the right model the analysis can be used to win back security additions that had previously been rejected by the C-Suite.