Surf Side Hospital has conducted extensive privacy training for their employees. They trust their employees because it is a small community. There have not been any breaches in the past. They feel that monitoring compliance through an audit trail is not necessary. In this circumstance would it be reasonable to forgo keeping an audit trail?

Question

Quizplus · Accepted Answer

Trust and extensive privacy training for employees are important, but they are not sufficient reasons to forgo an audit trail. Employee actions can still cause accidental or intentional breaches, and monitoring compliance through an audit trail helps identify and prevent such incidents. Even in a small community where everyone is known, human error and malicious intent can still occur, making it important to have a record of access and activity.

Surf Side Hospital Has Conducted Extensive Privacy Training for Their