When determining the appropriate password composition, the HIIM professional should refer to which of the following?
a. HIPAA Privacy Rule
b. HIPAA Security Rule
c. Organizational policy
d. HITECH Act