CPHIMS CPHIMS IT Governance and Management 3 — Questions and Answers
Question 1: In healthcare IT management, what does a Service Level Agreement (SLA) primarily define?
- Employee performance standards
- Expected levels of service performance and accountability between IT and end users (Correct answer)
- Vendor pricing structures
- Software licensing terms
Correct answer: Expected levels of service performance and accountability between IT and end users
An SLA formally documents the expected service performance levels, responsibilities, and remedies between IT service providers and their customers.
Question 2: Which IT management approach emphasizes continuous service improvement through defined processes, roles, and metrics?
- Waterfall development
- ITIL (Information Technology Infrastructure Library) (Correct answer)
- Six Sigma manufacturing
- Agile Scrum
Correct answer: ITIL (Information Technology Infrastructure Library)
ITIL is a framework specifically designed for IT service management that emphasizes process-driven continuous service improvement.
Question 3: A healthcare IT manager must reduce system downtime. Which strategy addresses this MOST comprehensively?
- Purchasing newer hardware
- Implementing a proactive capacity management and monitoring program (Correct answer)
- Increasing IT staff headcount
- Switching to open-source software
Correct answer: Implementing a proactive capacity management and monitoring program
Proactive capacity management and monitoring helps identify and resolve performance bottlenecks before they cause system failures and downtime.
Question 4: What is the difference between change management and project management in IT governance?
- They are identical processes
- Change management controls modifications to existing systems; project management delivers new capabilities (Correct answer)
- Project management controls system changes; change management delivers new projects
- Change management only applies to organizational culture
Correct answer: Change management controls modifications to existing systems; project management delivers new capabilities
Change management governs controlled modifications to production systems, while project management coordinates the delivery of new solutions and capabilities.
Question 5: Which document BEST describes how an organization will recover IT operations after a major disruption?
- Business requirements document
- IT Disaster Recovery Plan (DRP) (Correct answer)
- System development life cycle plan
- Vendor management agreement
Correct answer: IT Disaster Recovery Plan (DRP)
A Disaster Recovery Plan outlines the procedures, resources, and timelines to restore IT operations following a disruptive event.
Question 6: When conducting an IT risk assessment in a healthcare setting, which asset type typically requires the HIGHEST protection priority?
- Financial reporting systems
- Electronic Protected Health Information (ePHI) (Correct answer)
- Employee payroll systems
- Marketing databases
Correct answer: Electronic Protected Health Information (ePHI)
ePHI is subject to HIPAA regulations and represents the highest-priority asset due to patient privacy rights and significant regulatory penalties for breaches.
Question 7: What is the MAIN purpose of an IT audit in a healthcare organization?
- To evaluate employee performance
- To independently assess controls, compliance, and risk management effectiveness (Correct answer)
- To review vendor contracts
- To plan new IT projects
Correct answer: To independently assess controls, compliance, and risk management effectiveness
IT audits provide an independent evaluation of whether IT controls are adequate, compliance requirements are met, and risks are effectively managed.
CPHIMS CPHIMS IT Governance and Management 3
In healthcare IT management, what does a Service Level Agreement (SLA) primarily define?