suzanne is the chief information security officer at a major non profit hospital group and is given the responsibility to handle medical records