Addressing concerns raised by an audit that had asked the agency to create a risk management plan as well as remind users of My Health Record of how the emergency access function should be used.