A healthcare organization is concerned about employees accessing patient records without proper authorization. What physical control should they implement to prevent such incidents?1.0 MarksTwo-factor authenticationRole-based access controlSecurity awareness trainingData encryptionPrivacy screens on monitors

The healthcare organization should implement Role-based access control. This control limits network access based on a person's role within the organization. Each role is assigned certain access rights, and a person who is assigned that role inherits those rights. This ensures that employees can only access the information necessary to do their jobs and nothing more, thus reducing the risk of unauthorized access to patient records.

In addition, they could also consider implementing other controls such as:

1. Two-factor authentication: This adds an extra layer of security by requiring not only a password and username but also something that only the user has on them, such as a piece of information only they should know or have immediately on hand.

2. Security awareness training: This is a formal process for educating employees about computer security. A good security awareness program should educate employees about corporate policies and procedures for working with information technology (IT).

3. Data encryption: This is the method by which information is converted into secret code that hides the information's true meaning. The science of encrypting and decrypting information is called cryptography.

4. Privacy screens on monitors: These are a protective shield that is placed over a computer screen to prevent anyone other than the user from viewing what is on the screen. This can help prevent unauthorized individuals from viewing sensitive patient information.