12-35-105-900 Record storage and security

A. When not in use, active and closed paper records shall be stored in a locked cabinet or room.

B. Physical and data security controls shall exist to protect electronic records.