As information security officer, you are revising the policies at your rehabilitation facility for handling all patient clinical information. Your best resource for checking out specific accreditation standards and guidelines is the