Consider a physician practice that is transitioning from paper records to an electronic system. The receptionist area contains both hanging folders and the desktop computer on which the practice management system runs. During the transition, a patient's health information (a valued asset) exists in two states: on paper in a hanging folder and in an EHR on a computer. Characterize the risks (low, medium, or high) for each state in terms of threats, vulnerabilities, and probability of a breach. Explain and be specific.