A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements:

All access must be correlated to a user account.

All user accounts must be assigned to a single individual.

User access to the PHI data must be recorded.

Anomalies in PHI data access must be reported.

Logs and records cannot be deleted or modified.

Which of the following should the administrator implement to meet the above requirements? (Select THREE).

Question

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements:

All access must be correlated to a user account.
All user accounts must be assigned to a single individual.
User access to the PHI data must be recorded.
Anomalies in PHI data access must be reported.
Logs and records cannot be deleted or modified.

Which of the following should the administrator implement to meet the above requirements? (Select THREE).

Accepted Answer

A. Eliminate shared accounts. C. Implement usage auditing and review. E. Copy logs in real time to a secured WORM drive.

Answer

B. Create a standard naming convention for accounts.

Answer

D. Enable account lockout thresholds.

Answer

F. Implement time-of-day restrictions.

Answer

G. Perform regular permission audits and reviews.

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following requirements: All access must…

Question

Options

How the community answered

Explanation

Topics

Community Discussion