To help prevent security attacks on protected healthcare information, requires that health information systems utilize access controls, encrypt private information, and secure workstations from unauthorized access.