Which of the following best describes a physical safeguard under the HIPAA Security Rule?
-
A
An audit log that tracks who accessed ePHI
-
B
A policy requiring employees to change passwords every 90 days
-
C
A locked server room with keycard access
-
D
An automatic session timeout on workstations