A hospital's IT organization is establishing a practice responsible for defining policies that protect patient records so that only authorized clinicians can view them, ensuring the data remains accurate and is accessible whenever needed for treatment. Which ITIL practice's purpose does this describe?