CHPS Healthcare Information Security Controls

Question 1

Under the HIPAA Security Rule, which of the following is classified as an 'Addressable' implementation specification?

Accepted Answer

Automatic logoff

Answer

Automatic logoff is an Addressable specification under the Access Control standard, meaning entities must implement it if reasonable and appropriate or document why an equivalent measure was chosen.

Question 2

Which HIPAA Security Rule standard requires covered entities to implement policies to prevent, detect, contain, and correct security violations?

Accepted Answer

Security Management Process

Answer

The Security Management Process standard (45 CFR §164.308(a)(1)) is the overarching standard requiring risk analysis, risk management, sanction policy, and activity review.

Question 3

What is the primary purpose of a risk analysis under the HIPAA Security Rule?

Accepted Answer

To identify and assess threats, vulnerabilities, and risks to ePHI confidentiality, integrity, and availability

Answer

A risk analysis identifies and assesses potential threats and vulnerabilities to ePHI to determine the likelihood and impact of security incidents.

Question 4

Under the HIPAA Security Rule, which safeguard category includes workstation use policies and facility access controls?

Accepted Answer

Physical Safeguards

Answer

Physical Safeguards govern physical access to facilities and workstations, including facility access controls, workstation use policies, and device and media controls.

Question 5

A healthcare organization discovers that an employee's workstation has been accessed by an unauthorized user. According to the HIPAA Security Rule, this should be documented under which process?

Accepted Answer

Security Incident Procedures

Answer

Security Incident Procedures require covered entities to document and respond to suspected or known security incidents, including unauthorized access events.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare Information Security Controls