Which controls help enforce data access policies and track user activity?

Which controls help enforce data access policies and track user activity?

• A. Role-based access controls and audit logs.
• B. Publicly sharing PHI and disabling logs.
• C. Password complexity rules only.
• D. Display theme selection controls.

Answer: (A)

The key idea is combining who can access data with a record of what they do. Role-based access control grants permissions based on a user's role, ensuring people only access data appropriate to their duties. Audit logs provide a detailed trail of user activity, so you can see who accessed what and when, supporting accountability and incident response. Together, these controls both enforce data access policies and enable ongoing monitoring of actions. The other options miss this balance: publicly sharing PHI and disabling logs would undermine privacy and remove visibility into activity; password complexity rules improve authentication but don’t enforce access policies or track actions; display theme controls are unrelated to data access or activity monitoring.

The key idea is combining who can access data with a record of what they do. Role-based access control grants permissions based on a user's role, ensuring people only access data appropriate to their duties. Audit logs provide a detailed trail of user activity, so you can see who accessed what and when, supporting accountability and incident response. Together, these controls both enforce data access policies and enable ongoing monitoring of actions.

The other options miss this balance: publicly sharing PHI and disabling logs would undermine privacy and remove visibility into activity; password complexity rules improve authentication but don’t enforce access policies or track actions; display theme controls are unrelated to data access or activity monitoring.