Asecurity administrator is developing controls for creating audit trails and tracking if a phi data breach is to
occur. the administrator has been given the following requirements:
*all access must be correlated to a user account.
*all user accounts must be assigned to a single individual.
*user access to the phi data must be recorded.
*anomalies in phi data access must be reported.
*logs and records cannot be deleted or modified.
which of the following should the administrator implement to meet the above requirements? (select three).
a. eliminate shared accounts.
b. create a standard naming convention for accounts.
c. implement usage auditing and review.
d. enable account lockout thresholds.
e. copy logs in real time to a secured worm drive.
f. implement time-of-day restrictions.
g. perform regular permission audits and reviews..
a. eliminate shared accounts
c. implement usage auditing and review
e. copy logs in real time to secured worm drive