CPHIMS CPHIMS IT Governance and Management 2 — Questions and Answers
Question 1: Which framework is MOST commonly used to align IT governance with business objectives in healthcare organizations?
- TOGAF
- COBIT (Correct answer)
- ITIL
- ISO 27001
Correct answer: COBIT
COBIT (Control Objectives for Information and Related Technologies) is the most widely adopted framework for IT governance that aligns IT goals with business objectives.
Question 2: A hospital CIO wants to ensure IT investments deliver measurable value. Which governance practice BEST supports this goal?
- Implementing a help desk ticketing system
- Establishing a portfolio management process with defined metrics (Correct answer)
- Hiring additional IT staff
- Migrating all systems to the cloud
Correct answer: Establishing a portfolio management process with defined metrics
Portfolio management with defined metrics allows organizations to track and measure the business value delivered by IT investments.
Question 3: Under HIPAA, who bears ultimate accountability for ensuring a covered entity's compliance with security regulations?
- The CISO
- The Privacy Officer
- The organization's leadership/Board (Correct answer)
- The IT Department
Correct answer: The organization's leadership/Board
Ultimate accountability for HIPAA compliance rests with the organization's senior leadership and governing board, not individual staff roles.
Question 4: Which committee structure is MOST effective for overseeing healthcare IT governance decisions?
- IT-only steering committee
- Clinical informatics committee only
- Cross-functional IT governance committee with clinical and administrative representation (Correct answer)
- External vendor advisory board
Correct answer: Cross-functional IT governance committee with clinical and administrative representation
A cross-functional committee ensures that IT decisions reflect clinical, operational, and financial perspectives across the organization.
Question 5: What is the PRIMARY purpose of an IT charter in healthcare governance?
- To document software licenses
- To define the authority, responsibilities, and scope of the IT function (Correct answer)
- To outline vendor contracts
- To list IT personnel job descriptions
Correct answer: To define the authority, responsibilities, and scope of the IT function
An IT charter formally defines the mission, authority, responsibilities, and governance boundaries of the IT department within the organization.
Question 6: A healthcare organization's IT governance model should prioritize which principle when approving new technology investments?
- Lowest cost acquisition
- Alignment with strategic organizational goals (Correct answer)
- Latest available technology
- Vendor preference
Correct answer: Alignment with strategic organizational goals
IT governance frameworks consistently emphasize that technology investments must align with and support the organization's strategic objectives.
Question 7: Which metric is MOST useful for assessing IT governance effectiveness in a healthcare setting?
- Number of IT help desk tickets resolved
- Percentage of IT projects delivered on time, on budget, and meeting defined outcomes (Correct answer)
- Total IT budget spent
- Number of servers in the data center
Correct answer: Percentage of IT projects delivered on time, on budget, and meeting defined outcomes
Measuring project delivery against time, budget, and outcome targets directly reflects IT governance's ability to manage and deliver value.
CPHIMS CPHIMS IT Governance and Management 2
Which framework is MOST commonly used to align IT governance with business objectives in healthcare organizations?