A healthcare organization faces regulatory requirements and strict data protection laws. The organization understands the importance of investing in security technologies and controls to comply with these regulations. If none of the following technologies or controls are in place, which one should they "prioritize?

implementing encryption for sensitive patient data

security awareness training for employees

installing video surveillance cameras in common areas

installing security turnstiles at building entrances