CHPS Trivia 3

Question 1

Which NIST publication provides the primary framework for federal information security programs and is widely used in healthcare security?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides a catalog of security and privacy controls for federal information systems and is a key reference for healthcare security programs.

Question 2

What is the primary distinction between 'required' and 'addressable' implementation specifications under the HIPAA Security Rule?

Accepted Answer

Required specs must be implemented exactly; addressable specs may be adapted or not implemented if documented

Answer

Required specifications must be implemented as stated, while addressable specifications allow entities to assess reasonableness and document alternative measures or reasons for non-implementation.

Question 3

Which entity enforces the HIPAA Privacy Rule for most covered entities?

Accepted Answer

OCR (HHS Office for Civil Rights)

Answer

The HHS Office for Civil Rights (OCR) is the primary enforcement agency for the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.

Question 4

What type of risk analysis is specifically required by the HIPAA Security Rule?

Accepted Answer

Accurate and thorough assessment of potential risks to ePHI confidentiality, integrity, and availability

Answer

The Security Rule requires an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of all ePHI held by the entity.

Question 5

In healthcare security, what does the acronym 'CIA' stand for in the context of information security?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

The CIA triad — Confidentiality, Integrity, and Availability — represents the three core principles of information security that HIPAA's Security Rule is designed to protect.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Trivia 3