The risk that delays in, or inadequate responses to, regulations and the standardization of specifications and standards for medical information systems could disrupt the provision of products and services or business operations. This includes ongoing responses based on information gathered from relevant organizations and medical institutions.