CHPS Healthcare Information Security Controls 2

Question 1

Which of the following best describes the concept of 'integrity' in the context of the HIPAA Security Rule?

Accepted Answer

Protecting ePHI from improper alteration or destruction

Answer

Integrity under HIPAA Security Rule means that ePHI has not been altered or destroyed in an unauthorized manner, preserving its accuracy and completeness.

Question 2

Under the HIPAA Security Rule, what must a covered entity do when it terminates a workforce member's employment?

Accepted Answer

Implement a termination procedure that includes removal of system access

Answer

Workforce Security standards require covered entities to implement termination procedures including removing system access to prevent unauthorized use of ePHI post-employment.

Question 3

A healthcare organization uses a cloud-based EHR. Under HIPAA, which type of agreement must be in place with the cloud provider?

Accepted Answer

Business Associate Agreement (BAA)

Answer

Cloud providers that create, receive, maintain, or transmit ePHI on behalf of a covered entity are business associates and must have a BAA in place.

Question 4

Under the HIPAA Security Rule, 'audit controls' are best described as:

Accepted Answer

Hardware, software, or procedural mechanisms that record and examine activity in systems containing ePHI

Answer

Audit controls (45 CFR §164.312(b)) require mechanisms to record and examine access and activity in information systems that contain or use ePHI.

Question 5

Which of the following encryption standards is generally accepted for protecting ePHI in transit under HIPAA Security Rule guidance?

Accepted Answer

TLS 1.2 or higher

Answer

NIST and HHS guidance recommend TLS 1.2 or higher for encrypting ePHI in transit, as older protocols have known vulnerabilities.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare Information Security Controls 2