What practice helps prevent unauthorized access to electronic records in CBM T6?

• A. Restricting access and implementing role-based permissions.
• B. Sharing passwords openly.
• C. Disabling logins and audit trails.
• D. Allowing unrestricted modification rights.

Answer: (A)

Safeguarding electronic records starts with controlling who can see and change them. Restricting access and using role-based permissions puts people into defined roles and limits what each person can view or modify to only what their job requires. This follows the principle of least privilege, so even if credentials are compromised, the potential damage is contained because access is not granted broadly. In CBM T6 contexts, this also supports accountability: each user has a unique identity, and access rights are reviewed and updated as roles change, with activity trackable through logs.

Sharing passwords, turning off login requirements and audit trails, or giving everyone unrestricted modification rights undermine security. Shared passwords mean there’s no individual accountability; disabling logs hides misuse and makes it hard to detect problems; unrestricted edits open the door to data tampering or accidental changes. That’s why restricting access with role-based permissions is the best practice.