After a recent security breach at a hospital, it was discovered that nursing staff members, who were working the overnight shift, searched for and accessed private health information for local celebrities who were patients at the hospital. Which of the following would have enabled the hospital to discover this behavior BEFORE a breach occurred?

• Time-of-day restrictions
• Usage reviews
• Periodic permission audits
• Location-based policy enforcement