Electronic Health Records 3rd Edition by Byron Hamilton

Exercise 20

In the MU Core Measure: Privacy and Security , which of the following would not be required for an EP to qualify for this criteria?
A) Implement systems to protect privacy and security of patient data in the EHR program
B) Send staff members to the ONC certified training on HIPAA privacy and security regulations
C) Update EHR software and improve physical security
D) Conduct or review a security risk analysis