Healthcare organizations are required to protect electronic protected health information (ePHI), such as electronic health records, from various internal and external risks [1]. Safeguards must be in place even when emailing ePHI. One challenge is…