Bill is a cybersecurity analyst in a small company that specializes in healthcare billing for insurance companies. As part of his official duties, he has access to all data on the network, including individual patient medical records and financial records. Which of the following would best characterize Bill's data protection responsibilities during a potential malware attack on the company's network?