CHPS Healthcare Information Security Controls

Question 1

Under the HIPAA Security Rule, which of the following is classified as an 'Addressable' implementation specification?

Accepted Answer

Automatic logoff

Answer

Unique user identification

Answer

Emergency access procedure

Answer

Audit controls

Question 2

Which HIPAA Security Rule standard requires covered entities to implement policies to prevent, detect, contain, and correct security violations?

Accepted Answer

Security Management Process

Answer

Workforce Training and Awareness

Answer

Security Incident Procedures

Answer

Evaluation

Question 3

What is the primary purpose of a risk analysis under the HIPAA Security Rule?

Accepted Answer

To identify and assess threats, vulnerabilities, and risks to ePHI confidentiality, integrity, and availability

Answer

To document all workforce members with access to ePHI

Answer

To create an audit trail for all ePHI access events

Answer

To validate encryption key management procedures

Question 4

Under the HIPAA Security Rule, which safeguard category includes workstation use policies and facility access controls?

Accepted Answer

Physical Safeguards

Answer

Administrative Safeguards

Answer

Technical Safeguards

Answer

Organizational Safeguards

Question 5

A healthcare organization discovers that an employee's workstation has been accessed by an unauthorized user. According to the HIPAA Security Rule, this should be documented under which process?

Accepted Answer

Security Incident Procedures

Answer

Workforce Clearance Procedure

Answer

Information Access Management

Answer

Contingency Plan

Question 6

Which of the following HIPAA Security Rule requirements addresses the need for a covered entity to restore ePHI data after a disaster?

Accepted Answer

Disaster Recovery Plan

Answer

Emergency Mode Operation Plan

Answer

Data Backup Plan

Answer

Testing and Revision Procedures