A health care organization's information security manager is notified of a possible breach of critical patient data involving a large volume of records. What sh...