Network segmentation is among new potential mandates for regulated entities under a proposed update to the HIPAA security rule, but many organizations continue to struggle to implement that as well as other critical best practices, said Candice Moschell of consulting firm Crowe LLP.