Which are security safeguards that protect equipment, media, and facilities?

The correct answer is physical safeguards. These are essential components of security measures designed to protect the physical aspects of information systems and health data. Physical safeguards include measures that secure equipment, media, and facilities from unauthorized access, natural disasters, and environmental hazards. Examples of physical safeguards are security locks, surveillance cameras, alarms, and secure server rooms that help safeguard physical assets from theft or damage.

Understanding the role of physical safeguards is crucial in ensuring the overall security of health data management systems. Without robust physical security measures in place, sensitive information can be at risk of exposure or loss, emphasizing the need for a comprehensive security strategy that addresses all potential vulnerabilities related to infrastructure.

Administrative controls, on the other hand, focus on policies, procedures, and practices for managing the overall security environment. Audit controls relate to monitoring and evaluating access and integrity of data systems, while role-based safeguards pertain to access controls based on the specific roles of individuals within an organization. These aspects are important, but they do not pertain directly to the protection of physical resources themselves.