Healthcare facilities need to have strict policies about mobile devices and remote access to the organization's network when access to protected health information is involved. You are asked by a healthcare provider to help her set up a way to access her account while she is at a conference in Denver. What are some policies that your organization might have to this kind of arrangement?