← All CDIA Flashcard Decks

Compliance Standards Flashcards

7 cards from real CDIA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Compliance Standards flashcards as text
  1. Under HIPAA, what is the maximum civil monetary penalty per violation category for 'willful neglect — not corrected'?

    Answer: $1,919,173

    HIPAA civil penalties for willful neglect not corrected are capped at $1,919,173 per violation category per year (adjusted for inflation).

  2. Which NIST publication provides the Risk Management Framework (RMF) used to guide federal information system security compliance?

    Answer: NIST SP 800-37

    NIST SP 800-37 defines the Risk Management Framework (RMF) for federal information systems.

  3. A document imaging system must retain financial audit records for seven years to satisfy which US regulation?

    Answer: Sarbanes-Oxley Act Section 802

    SOX Section 802 mandates retention of audit-related records for seven years.

  4. What does the concept of 'legal hold' require in the context of document imaging compliance?

    Answer: Suspending the routine disposition of documents relevant to litigation or investigation

    A legal hold suspends normal destruction and disposition schedules for records potentially relevant to litigation or government investigation.

  5. Which standard defines requirements for the trustworthiness of digital records specifically in a legal context, often cited in US court admissibility?

    Answer: Federal Rules of Evidence Rule 902(13)

    Federal Rules of Evidence Rule 902(13) addresses self-authentication of electronic records generated by an electronic process or system.

  6. In a CDIA context, what is the primary purpose of an audit trail in a document management system?

    Answer: To provide a chronological record of who accessed, modified, or deleted documents

    Audit trails create a tamper-evident chronological log of all document activities, supporting compliance and legal defensibility.

  7. Which regulation requires US federal agencies to manage their records according to approved schedules and transfer permanent records to the National Archives?

    Answer: Federal Records Act (44 U.S.C. Chapter 31)

    The Federal Records Act (44 U.S.C. Chapter 31) establishes requirements for federal records management including disposition and transfer to NARA.