Do CAS devices meet HIPAA Security Requirements?

From an article on HIPAA Security Rule, Data Migration: Is Your PACS Running Naked?, published in Health Imaging magazine:

For those hospitals that have been using a PACS as the primary means for diagnostic reading and have been storing images on some sort of media (MOD, DLT, AIT), this means that if a second copy of the patient image data is not available and stored in a way as to provide data recovery in the event of a disaster to the main system, then the facility is not in compliance with the HIPAA Security requirements.

Does this mean that "the single instance of patient images stored in CAS devices" are not in compliance with HIPAA Security rule?