Our org is currently involved in the process of implementing a wireless-based asset tracking system at our healthcare facility. We've selected a vendor, but before finalizing everything, we need to thoroughly vet the security aspects of the solution.

I would love to hear from those of you who have experience with this kind of technology. What are some critical security questions about controls you suggest asking the vendor? Are there specific security pitfalls or challenges I should be aware of?

Also, if you have any general advice on integrating such a system within a healthcare setting while maintaining compliance (e.g., HIPAA), that would be greatly appreciated!