CHP Risk Management & Compliance Audits 3

Question 1

Which HIPAA concept requires organizations to implement security measures that are reasonable and appropriate based on their size, complexity, and capabilities?

Accepted Answer

Flexibility and scalability standard

Answer

HIPAA's flexibility and scalability standard acknowledges that one-size-fits-all solutions are impractical, allowing organizations to tailor controls to their specific circumstances.

Question 2

During a risk analysis, an organization identifies that unencrypted laptops are used by field nurses. Which risk treatment option involves implementing full-disk encryption?

Accepted Answer

Risk mitigation

Answer

Risk mitigation reduces the likelihood or impact of a threat by implementing controls such as encryption to protect PHI on mobile devices.

Question 3

Which of the following is an example of 'residual risk' in HIPAA risk management?

Accepted Answer

The risk that remains after implementing security controls

Answer

Residual risk is the remaining exposure after controls have been applied; organizations must decide whether this level is acceptable or requires additional safeguards.

Question 4

A HIPAA audit reveals an organization has not updated its risk assessment in four years. Why is this problematic under the Security Rule?

Accepted Answer

Risk assessments must reflect current threats, vulnerabilities, and operational changes

Answer

The Security Rule requires ongoing, not one-time, risk analysis that accounts for environmental and operational changes that introduce new vulnerabilities.

Question 5

Under the HIPAA Enforcement Rule, which factor can INCREASE the civil money penalty tier for a violation?

Accepted Answer

The organization had a prior history of identical violations

Answer

OCR considers prior compliance history as an aggravating factor, which can elevate violations to higher penalty tiers with greater per-violation fines.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Risk Management & Compliance Audits 3