The omni-bus rule formalizes enforcement provisions for what is outlined in the HITECH act. Under the omni-bus rule, the definition for business associates includes subcontractors and requires ongoing monitoring of organizational security processes and programs.