Which practice reduces risk when securing electronic communications and records?

• A. Send PHI via unsecured email.
• B. Share passwords with colleagues.
• C. Encrypt data in transit and at rest.
• D. Store data unencrypted on a jump drive.

Answer: (C)

Protecting the confidentiality of electronic communications and records comes from encrypting information both while it’s moving and while it’s stored. Encrypting data in transit shields messages and files from eavesdroppers and tampering as they travel across networks, while encrypting data at rest protects stored information on servers, laptops, and portable drives if a device is lost or accessed without authorization. Together, these protections greatly reduce the risk of a breach by making the information unreadable to anyone without the proper keys. The other practices introduce clear risks: unsecured email can be intercepted and read; sharing passwords undermines authentication and access controls; and unencrypted data on a jump drive is vulnerable if the drive is lost. Encrypting data in transit and at rest is the strongest, most effective way to secure electronic communications and records.