New research finds a gap in network security deployment as federal regulators move to tighten requirements for clinical environments.