What security measures protect patient data in transit and at rest?

• A. Encryption, access controls, audit trails, and secure logging of events.
• B. Relying solely on physical security with no digital controls.
• C. Sharing passwords via email.
• D. Disabling all audit logs.

Answer: (A)

Protecting patient data in transit and at rest requires a layered approach that includes encryption to render data unreadable if intercepted or accessed without authorization, and strong access controls to ensure only authorized users can retrieve or modify data. Audit trails and secure logging provide a record of who accessed what and when, supporting accountability and the ability to detect unusual activity. Together these measures safeguard confidentiality, integrity, and traceability of patient information as it moves and when it’s stored.

This is why encryption, access controls, audit trails, and secure logging of events are the best combination. Relying solely on physical security ignores digital threats and doesn’t protect data during transmission or electronic storage. Sharing passwords via email is insecure and undermines authentication. Disabling all audit logs eliminates visibility and ability to respond to incidents.