The emergency healthcare office manager tells you they have begun thinking about HIPAA compliance. To establish compliant practices, they would like to better protect their physical assets, including the examination rooms and back office, but are not certain how to do so. They store medicine in part of the back office, and they want to keep it available on-site so patients can collect everything they need in one visit. However, they do not want everyone to have access to this area.