CHI Quality Assurance & Compliance 2

Question 1

Which federal regulation establishes the Security Rule requiring covered entities to implement administrative, physical, and technical safeguards for ePHI?

Accepted Answer

HIPAA

Answer

HIPAA's Security Rule (45 CFR Parts 160 and 164) requires covered entities and business associates to protect electronic protected health information through administrative, physical, and technical safeguards.

Question 2

A hospital's quality team discovers that medication error rates are 3x the national benchmark. Which QI methodology would BEST structure a root cause analysis and iterative improvement cycle?

Accepted Answer

Plan-Do-Study-Act (PDSA)

Answer

The PDSA cycle is designed for rapid, iterative improvement testing by planning a change, doing it on a small scale, studying results, and acting on findings.

Question 3

Under the CMS Conditions of Participation, which document must a hospital maintain to demonstrate ongoing quality monitoring of medical staff performance?

Accepted Answer

Medical Staff Bylaws and Credentialing Files

Answer

CMS Conditions of Participation require hospitals to maintain medical staff bylaws and credentialing files that document ongoing professional practice evaluation (OPPE) and focused professional practice evaluation (FPPE).

Question 4

Which accreditation standard requires hospitals to implement a proactive risk assessment to identify potential patient safety vulnerabilities before adverse events occur?

Accepted Answer

The Joint Commission's FMEA requirement

Answer

The Joint Commission requires accredited organizations to conduct at least one proactive risk assessment (Failure Mode and Effects Analysis) annually to identify and mitigate potential safety risks.

Question 5

A health informatics professional is auditing EHR access logs and finds a nurse accessed 200 patient records outside her unit in one week. This MOST likely triggers which compliance action?

Accepted Answer

Conducting a workforce sanction per the HIPAA Privacy Rule

Answer

Inappropriate access to PHI by workforce members requires investigation and, if confirmed, imposition of sanctions consistent with the organization's HIPAA Privacy Rule policies.

(CHI) Certified Health Informatician Practice Test

(CHI) Certified Health Informatician Practice Test

CHI Quality Assurance & Compliance 2