Now that the CCC has again revealed security gaps in the electronic patient record (ePA), the BSI has also made a statement.