CHC Standards, Policies, and Procedures 5

Question 1

Which of the following is an example of a compliance 'standard' as distinct from a 'policy' or 'procedure'?

Accepted Answer

The requirement that all PHI transmissions be encrypted to NIST standards

Answer

A standard defines a specific measurable requirement (e.g., encryption to NIST specifications) that policies and procedures must satisfy.

Question 2

When a compliance policy conflicts with a state law that is MORE restrictive than federal law, the organization must:

Accepted Answer

Follow the more restrictive state law unless federal law explicitly preempts it

Answer

HIPAA and most federal healthcare laws set a floor, not a ceiling; organizations must comply with more restrictive state laws unless federal law explicitly preempts the state provision.

Question 3

A compliance risk assessment should inform policy development by:

Accepted Answer

Identifying high-risk areas where robust policy controls are most needed

Answer

Risk assessments prioritize where policy controls are most needed, enabling the organization to allocate compliance resources to highest-risk operations.

Question 4

Under the FCA's qui tam provisions, a relator (whistleblower) who files a successful lawsuit on behalf of the government may receive:

Accepted Answer

15–30% of the government's recovery in the case

Answer

Qui tam relators are entitled to 15–30% of the government's recovery depending on whether the government intervenes in the case.

Question 5

A healthcare organization's policy version control system should MOST importantly track:

Accepted Answer

Effective dates, revision history, approving authority, and next review date

Answer

Version control must capture effective dates, revision history, approvals, and scheduled reviews to demonstrate governance and support audit readiness.

CHC - Certified in Healthcare Compliance Practice Test

CHC - Certified in Healthcare Compliance Practice Test

CHC Standards, Policies, and Procedures 5