A health informatician conducting a HIPAA Security Risk Analysis discovers an unencrypted laptop containing ePHI was used by a remote employee. Which risk response is MOST appropriate under HIPAA's required implementation specifications?

Remaining questions and full explanations are VIP-exclusive.