When it comes to the issue of public key management, there are many options. Is it best to develop a PKI in-house, or outsource this system to a third party? Given Bayside Hospital's EMR security requirements, how will certificates be handled? If in-house, how will you deploy the system?