What is the combination of security model and auditing used to control and log data access in Epic?

• A. Audit Trails
• B. Security Roles and Logs
• C. Access Logging and Roles
• D. RBAC and Audit Trails

Answer: (D)

In Epic, access to data is controlled by a security model called role-based access control, which assigns users to roles that have defined permissions. This ensures people can only do what their job requires. At the same time, Epic records a detailed audit trail of data access and actions—who did what, to which records, and when. This combination provides both the ability to restrict access (RBAC) and the ability to trace every access event (Audit Trails). The pairing is essential: RBAC defines and enforces privileges, while Audit Trails ensure accountability and allow investigations if needed.