CHAP Healthcare Technology & Information Systems 2 — Questions and Answers
Question 1: During an EHR implementation, which phase involves configuring the system to match the organization's workflows and data entry requirements?
- Go-live
- System build and configuration (Correct answer)
- Post-implementation review
- User acceptance testing
Correct answer: System build and configuration
The system build and configuration phase involves customizing the EHR to align with the organization's specific clinical workflows, templates, order sets, and documentation requirements.
Question 2: A ransomware attack has encrypted a hospital's EHR data and the attackers are demanding payment. Which preparedness measure would have been most effective in minimizing the impact?
- Having a comprehensive firewall in place
- Maintaining regular, tested data backups stored offline (Correct answer)
- Using strong password policies for all staff
- Implementing multi-factor authentication
Correct answer: Maintaining regular, tested data backups stored offline
Regular, tested offline backups allow an organization to restore encrypted data without paying the ransom, making them the most critical defense against ransomware impact.
Question 3: Which act strengthened HIPAA privacy and security rules, extended responsibilities to business associates, and increased penalties for violations?
- HITECH Act (Correct answer)
- MACRA
- Sarbanes-Oxley Act
- 21st Century Cures Act
Correct answer: HITECH Act
The HITECH Act of 2009 strengthened HIPAA by expanding the rules to business associates, increasing civil and criminal penalties, and requiring breach notifications.
Question 4: A healthcare administrator is evaluating cloud-based storage for patient records. Which consideration is MOST critical from a compliance standpoint?
- The storage cost per gigabyte
- Whether the vendor will sign a HIPAA Business Associate Agreement (BAA) (Correct answer)
- The geographic location of the data center
- The cloud provider's market share and reputation
Correct answer: Whether the vendor will sign a HIPAA Business Associate Agreement (BAA)
Any cloud vendor handling protected health information (PHI) must sign a BAA, which establishes the vendor's responsibility to safeguard PHI under HIPAA.
Question 5: In revenue cycle management technology, what does an 'eligibility verification system' primarily do?
- Codes diagnoses and procedures using ICD-10 and CPT codes
- Confirms a patient's insurance coverage and benefits before or at the point of service (Correct answer)
- Submits claims to payers electronically
- Tracks accounts receivable aging reports
Correct answer: Confirms a patient's insurance coverage and benefits before or at the point of service
Eligibility verification systems automatically check a patient's insurance coverage, co-pays, deductibles, and benefits in real-time, reducing claim denials and improving collections.
Question 6: Which image storage and retrieval standard is used specifically for managing medical imaging data such as X-rays and MRI scans?
- HL7 FHIR
- DICOM (Digital Imaging and Communications in Medicine) (Correct answer)
- ICD-10-CM
- SNOMED CT
Correct answer: DICOM (Digital Imaging and Communications in Medicine)
DICOM is the international standard for transmitting, storing, retrieving, printing, and displaying medical imaging information, enabling interoperability between imaging devices and systems.
Question 7: What is the role of a 'super user' during an EHR go-live?
- A senior administrator with full system administrator privileges
- A trained staff member who provides peer-to-peer support and troubleshooting on the floor during go-live (Correct answer)
- An IT technician responsible for system maintenance and upgrades
- A vendor representative who configures the EHR remotely
Correct answer: A trained staff member who provides peer-to-peer support and troubleshooting on the floor during go-live
Super users are frontline staff trained extensively on the EHR who serve as on-the-floor resources to assist colleagues with questions and issues during and after go-live.
CHAP Healthcare Technology & Information Systems 2
During an EHR implementation, which phase involves configuring the system to match the organization's workflows and data entry requirements?