Which one of the following steps can shield against discovery of an incident report?

Which following steps

Conducting peer review is incorrect

Invoking the work product doctrine

To shield against the discovery of an incident report, you can consider the following step:

Implement Access Controls: Restrict access to incident reports to only those individuals who have a legitimate need-to-know. This can be done by ensuring that the incident reports are stored in a secure location with limited physical access or by implementing digital access controls such as permissions and user authentication.

By implementing access controls, you can prevent unauthorized individuals from stumbling upon or deliberately seeking out incident reports, thereby reducing the chances of their discovery. It is important to ensure that access controls are applied consistently and reviewed periodically to maintain an appropriate level of confidentiality for the incident reports.

Conducting a peer review, Following HIPAA regulations, Invoking the work product doctrine

I thinks its following the HIPPA regulations