CHPS Healthcare Information Security Controls 3

Question 1

Under the HIPAA Security Rule, what is the purpose of the 'Assigned Security Responsibility' standard?

Accepted Answer

Designating a person responsible for developing and implementing security policies and procedures

Answer

Assigning unique IDs to all workforce members accessing ePHI

Answer

Classifying ePHI data by sensitivity level for access control

Answer

Determining which workforce members require security awareness training

Question 2

A hospital's EHR system sends a patient summary to a referring physician via unsecured email. Under the HIPAA Security Rule, which standard is most directly violated?

Accepted Answer

Transmission Security

Answer

Access Control

Answer

Integrity Controls

Answer

Audit Controls

Question 3

Which HIPAA Security Rule safeguard category includes the requirement for workforce training on security policies and procedures?

Accepted Answer

Administrative Safeguards

Answer

Physical Safeguards

Answer

Technical Safeguards

Answer

Organizational Safeguards

Question 4

Under NIST guidelines adopted for HIPAA compliance, what does the acronym 'FIPS' stand for?

Accepted Answer

Federal Information Processing Standards

Answer

Federal Information Privacy Standards

Answer

Federated Identity and Privacy System

Answer

Functional Information Protection Schema

Question 5

A covered entity's risk management plan should achieve which primary goal per the HIPAA Security Rule?

Accepted Answer

Reduce risks to ePHI to a reasonable and appropriate level

Answer

Eliminate all identified risks to ePHI

Answer

Document every potential vulnerability in detail

Answer

Transfer all residual risk to business associates

Question 6

Which of the following is an example of a technical safeguard under the HIPAA Security Rule?

Accepted Answer

Role-based access control limiting ePHI access by job function

Answer

Visitor sign-in logs at a data center

Answer

Workforce security awareness training

Answer

Policies governing workstation placement in patient areas