Sensitive information in a physician's office setting includes: personal patient data, laboratory data, and financial data. To safeguard these data, identify two (2) categories of access control with examples that have operational impacts on the office for each of the three (3) NIST dimensions: management, operational, and technical. Please briefly state your rationale for the selection of control categories.