CHPS Healthcare Information Security Controls 3

Question 1

Under the HIPAA Security Rule, what is the purpose of the 'Assigned Security Responsibility' standard?

Accepted Answer

Designating a person responsible for developing and implementing security policies and procedures

Answer

The Assigned Security Responsibility standard (45 CFR §164.308(a)(2)) requires covered entities to identify a Security Officer responsible for security policies and procedures.

Question 2

A hospital's EHR system sends a patient summary to a referring physician via unsecured email. Under the HIPAA Security Rule, which standard is most directly violated?

Accepted Answer

Transmission Security

Answer

Transmission Security (45 CFR §164.312(e)) requires covered entities to guard against unauthorized access to ePHI transmitted over electronic communications networks.

Question 3

Which HIPAA Security Rule safeguard category includes the requirement for workforce training on security policies and procedures?

Accepted Answer

Administrative Safeguards

Answer

Security Awareness and Training is an Administrative Safeguard (45 CFR §164.308(a)(5)) requiring periodic security training for all workforce members.

Question 4

Under NIST guidelines adopted for HIPAA compliance, what does the acronym 'FIPS' stand for?

Accepted Answer

Federal Information Processing Standards

Answer

FIPS stands for Federal Information Processing Standards, which are NIST-issued standards often referenced in HIPAA security guidance, particularly for encryption.

Question 5

A covered entity's risk management plan should achieve which primary goal per the HIPAA Security Rule?

Accepted Answer

Reduce risks to ePHI to a reasonable and appropriate level

Answer

Risk management under the Security Rule aims to reduce risks and vulnerabilities to ePHI to a reasonable and appropriate level — not necessarily eliminate them entirely.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare Information Security Controls 3