Q63
Single choice
An independent risk assessment determined that a hospital's existing policies did not have a formal process in place to address system misuse, abuse, or fraudulent activity by internal users.
Which of the following would BEST address this deficiency in the Corrective Action Plan?