Protected Health Information (PHI) flows through systems fast, crossing services, APIs, and logs. One missed control, one sloppy permission set, and you’ve given the wrong person the keys. Risk-Based Access changes this. It doesn’t just ask, “Who are you?”—it asks, “Should you have this, right now, for