CPHIMS Leadership and Strategic Planning Flashcards

Which risk management step involves assigning probability and impact scores to identified IT risks?

Answer: Risk assessment/analysis

Risk assessment/analysis evaluates each identified risk by assigning probability and impact ratings to prioritize mitigation efforts.

A strategic planning committee wants to evaluate external threats to the organization's IT environment. Which tool is MOST appropriate?

Answer: PESTLE analysis

PESTLE (Political, Economic, Social, Technological, Legal, Environmental) analysis systematically evaluates external macro-environmental factors affecting IT strategy.

An IT leader notices that two departments have conflicting priorities for a shared system upgrade. What is the BEST approach?

Answer: Facilitate a structured negotiation aligned to organizational priorities

Structured negotiation using organizational priority frameworks ensures conflict is resolved in a way that serves the broader mission rather than departmental preferences.

Which organizational structure gives a project manager the MOST authority over resources in a health IT project?

Answer: Projectized (project-based) structure

In a projectized structure, the project manager has full authority over project resources, budget, and personnel, unlike functional or matrix structures.

When building an IT strategic roadmap, what is the purpose of defining 'quick wins'?

Answer: To build stakeholder momentum and demonstrate early value

Quick wins deliver visible early benefits that build credibility, maintain stakeholder support, and demonstrate progress toward strategic goals.

A CIO is evaluating cloud vs. on-premise infrastructure for a new clinical data warehouse. Which strategic factor should be weighted MOST heavily?

Answer: Scalability to support organizational growth and regulatory compliance

Scalability and compliance alignment are strategic factors that ensure the infrastructure supports long-term organizational needs and regulatory obligations.

In healthcare IT governance, what does the principle of 'separation of duties' primarily protect against?

Answer: Fraud, errors, and unauthorized system changes

Separation of duties ensures no single individual controls all aspects of a critical process, reducing the risk of fraud, errors, and unauthorized modifications.