Only some requirements must be complied with for the initial February 15, 2018 certification.
Individuals who are fully covered under a firm’s program are broadly exempt.
It's possible to obtain exemption from some of the regulation’s requirements.
Completing the risk assessment can be a challenging task. One way to make that task easier is to look to frameworks or approaches that have already been developed and become established.
Organizations have a lot of work to complete by February 15, 2018. Those that can't make that deadline have limited options, but there are approaches they can try.