A small medical practice backs up its EHR data nightly to an external hard drive kept in the same office. Which critical disaster recovery risk does this approach fail to address?
-
A
Backup frequency — daily backups are too infrequent for HIPAA compliance
-
B
Geographic separation — a local disaster could destroy both the primary and backup
-
C
Encryption — external hard drives cannot be encrypted
-
D
Testing — on-site backups cannot be tested for integrity