acceptable-use Controls

Specify the proper functions to be performed by workstations that access ePHI and the manner in which those functions are to be performed

A cybersecurity risk management policy is established and enforced