Which statement best describes the elements typically addressed in a risk assessment for cybersecurity in rehab devices with connected components?

• A. Focus only on physical safety.
• B. No cyber threats in rehab devices.
• C. Identify cyber threats, implement encryption, authentication, secure update mechanisms, and data backup; ensure access controls and incident response.
• D. Encryption is sufficient; no authentication needed.

Answer: (C)