Which one of following regulations is most likely to be found under the security rule?

All physical files need to be under lock and key in a secure area.

Conversations regarding possible disclosure of PHI should be limited in public areas.

Appropriate lockout procedures and password protection should be used whenever stepping away from your work station.

The door or curtain should be drawn closed to ensure patient privacy.