AHIC Health IT Policy and Governance 3

Question 1

Which of the following best describes a Business Associate Agreement (BAA) under HIPAA?

Accepted Answer

A legal agreement requiring vendors handling PHI to meet HIPAA privacy and security standards

Answer

A BAA is a contract between a covered entity and a business associate that specifies how PHI will be protected in accordance with HIPAA requirements.

Question 2

The HITECH Act enhanced HIPAA by doing which of the following?

Accepted Answer

Strengthening enforcement, increasing penalties, and extending HIPAA obligations to business associates

Answer

HITECH strengthened HIPAA by increasing civil penalties, requiring breach notifications, and directly applying HIPAA security requirements to business associates.

Question 3

Which of the following is an example of an administrative safeguard under the HIPAA Security Rule?

Accepted Answer

Conducting regular workforce security training

Answer

Workforce security training is an administrative safeguard — policies and procedures designed to manage the selection, development, and training of the workforce.

Question 4

What is the primary purpose of a health IT governance charter?

Accepted Answer

To define the authority, scope, and responsibilities of the IT governance body

Answer

A governance charter formally establishes the mandate, structure, roles, and decision-making authority of a governance committee or board.

Question 5

Under the ONC's interoperability framework, FHIR (Fast Healthcare Interoperability Resources) serves primarily as which of the following?

Accepted Answer

A standard for electronic health data exchange using modern web APIs

Answer

FHIR is an HL7 standard that uses RESTful APIs to enable the exchange of healthcare information in modern, interoperable formats.

(AHIC) AMIA Health Informatics Certification Practice Test

(AHIC) AMIA Health Informatics Certification Practice Test

AHIC Health IT Policy and Governance 3