An investigator obtains consent and HIPAA authorization from subjects to review their medical records and HIV status. She plans to go back to the medical record, so the HIV status information is stored along with subject identifiers in a database that she keeps on her laptop computer. What are some safeguards she could use to protect subject privacy and data confidentiality?

Having multi$-$factor authentication on her laptop to prevent others from accessing her device

Using data encryption and storing data on a secure cloud environment, not on her laptop

Storing her laptop in a secure$,$ locked environment when not using it

All of the above