The correct answer for the question that is being presented above is this one: "c. Following HIPAA regulations." The step that can shield against discovery of an incident report is that of following HIPAA regulations. It has to be monitored well to avoid mistakes and falsification.
