I guess the answer on the first blank is Data encryption and on the second blank is Sign-on codes and passwords.
In an open computer network such as the internet, HIPAA requires the use of Data encryption. in a closed system such as a local area network, HIPAA allows Sign-on codes and passwords as controls.