Which describes an external customer in healthcare security?

• A. Hospital staff
• B. Volunteers
• C. Patients
• D. Regulated customers

Answer: (D)

External customers are people or entities outside the hospital who must be granted access and interact with the facility under rules set by outside authorities. They are distinct from internal customers like staff, volunteers, and other team members who are part of the organization and operate under internal processes. Describing an external customer as regulated emphasizes that their handling and access are governed by external regulations and standards—privacy laws, safety requirements, licensing rules, and accreditation expectations. Because security programs must align with these regulatory demands, the controls for external, regulated customers—such as vetting, credentialing, controlled access, and documented procedures—are designed to protect patient information, safety, and assets. Internal roles and patients, while also customers of the hospital, are not external to the organization, so they don’t fit the same regulatory-driven framework.