CRM Risk Management & Security 5

Question 1

Which standard provides a globally recognized framework for establishing, implementing, and maintaining an information security management system (ISMS)?

Accepted Answer

ISO 27001

Answer

ISO 27001 specifies requirements for an ISMS, covering risk assessment, controls, and continuous improvement for information security.

Question 2

An employee intentionally leaks confidential records to a competitor. This scenario is an example of which type of threat?

Accepted Answer

Malicious insider threat

Answer

A malicious insider threat involves an authorized employee deliberately misusing access to harm the organization by disclosing confidential records.

Question 3

When records are transferred between organizations as part of a merger, which security measure is most important to implement immediately?

Accepted Answer

Reclassifying and reviewing access rights to transferred records

Answer

Reclassifying records and reviewing access rights ensures that only authorized personnel in the new organization can access sensitive transferred records.

Question 4

What is the primary purpose of a records security audit trail?

Accepted Answer

To provide a chronological record of who accessed or modified records and when

Answer

An audit trail logs all access and modification activity on records, enabling accountability, forensic investigation, and compliance verification.

Question 5

Under HIPAA Security Rule requirements, covered entities must implement which type of control to protect electronic protected health information (ePHI)?

Accepted Answer

Administrative, physical, and technical safeguards in combination

Answer

The HIPAA Security Rule mandates a three-part framework of administrative, physical, and technical safeguards to protect ePHI comprehensively.

(CRM) Certified Records Management Practice Test

(CRM) Certified Records Management Practice Test

CRM Risk Management & Security 5