The health care provider should consider improved controls, including the establishment of written policies and procedures covering the loan and use of $\_\_\_\_\_$ and whether ePHI should even be maintained on these media$/$devices at all.$$

a$.$

$$ Mainframe and archived computers

b$.$

$$ Off$-$site storage of paper records

c$.$

$$ Computer devices that are portable

d$.$

$$ Electronic surveillance equipment