Health IT Policy and Governance Flashcards
7 cards from real AHIC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Health IT Policy and Governance flashcards as text
Which of the following best describes a Business Associate Agreement (BAA) under HIPAA?
Answer: A legal agreement requiring vendors handling PHI to meet HIPAA privacy and security standards
A BAA is a contract between a covered entity and a business associate that specifies how PHI will be protected in accordance with HIPAA requirements.
The HITECH Act enhanced HIPAA by doing which of the following?
Answer: Strengthening enforcement, increasing penalties, and extending HIPAA obligations to business associates
HITECH strengthened HIPAA by increasing civil penalties, requiring breach notifications, and directly applying HIPAA security requirements to business associates.
Which of the following is an example of an administrative safeguard under the HIPAA Security Rule?
Answer: Conducting regular workforce security training
Workforce security training is an administrative safeguard — policies and procedures designed to manage the selection, development, and training of the workforce.
What is the primary purpose of a health IT governance charter?
Answer: To define the authority, scope, and responsibilities of the IT governance body
A governance charter formally establishes the mandate, structure, roles, and decision-making authority of a governance committee or board.
Under the ONC's interoperability framework, FHIR (Fast Healthcare Interoperability Resources) serves primarily as which of the following?
Answer: A standard for electronic health data exchange using modern web APIs
FHIR is an HL7 standard that uses RESTful APIs to enable the exchange of healthcare information in modern, interoperable formats.
Which principle of healthcare data governance ensures that data is accurate, complete, and reliable for decision-making?
Answer: Data quality
Data quality in governance refers to the accuracy, completeness, consistency, and reliability of data used for clinical and administrative decision-making.
A hospital's IT governance board must decide between two EHR upgrade proposals. The BEST governance practice is to evaluate proposals based on which primary criteria?
Answer: Alignment with strategic goals, cost-benefit analysis, and risk assessment
Sound IT governance requires evaluating proposals against strategic alignment, return on investment, and risk to make objective, organization-wide decisions.