An organizational justification used for healthcare security is

• A. Financial gain
• B. Public relations
• C. Legal responsibility
• D. Marketing

Answer: (C)

Healthcare security is driven by the obligation to comply with laws that protect patient information and safety. Organizations must implement safeguards to meet legal and regulatory requirements, such as privacy and security rules, because violations can lead to penalties, civil or criminal liability, and loss of accreditation. This legal responsibility provides the binding justification for investing in controls like access management, auditing, breach response, and risk assessments. While public relations or financial considerations can influence decisions, they are secondary to the formal duty to protect patients and comply with applicable laws.