HIPAA is serious business. Nobody wants their private medical information to fall into the hands of strangers. If you work with servers in the medical field, having a good understanding of the HIPAA and HITECH laws are a must. Check out this piece that Liquid Web asked me to write regarding this very topic.
If you want to get the most out of your server, one of the best tactics is to use modern browser cache controlling. The fewer elements a user has to download repeated can take considerably strain off of the server. Check out this piece I did for the folks at Liquid Web that can help you configure this technique on your own.