ONC’s first app is a HIPAA security assessment tool for smaller practices