For which of the following activities$/$programs should healthcare organizations establish enterprise$-$wide standards to maintain data security and protect the privacy and confidentiality of information?

Information security policies and procedures

Protecting information privacy and confidentiality

Environmental scanning

Disaster protection and recovery procedures