As the privacy officer of your facility, you have been charged with developing policies and procedures for protecting the confidentiality and security of the clinical data collected in your computerized system. one of the first steps you will take is to judge the value of information processed by your system and classify it. another step you will need to take is to
a. authorize access to information collected based on level of data sensitivity
b. prevent all non-clinicians' access to any confidential information in the system
c. establish firewalls to protect aggregate data collected within your facility
d. establish passwords for all customers, both internal and external, who request access to the information in your system