To minimize the risk of HIPAA breaches, an organization can put which of the following systems into place?

a. Centralized routing of all requests for disclosures
b. Encryption and authentication
c. Written releases for all disclosures
d. Requiring all releases to be approved by the Medical Reports Department