Epic Skills Assessment Information Security & HIPAA Compliance 1

Question 1

Under HIPAA, which of the following is considered Protected Health Information (PHI)?

Accepted Answer

A patient's name combined with their diagnosis

Answer

PHI is any individually identifiable health information, including a patient's name linked to their medical condition.

Question 2

Which HIPAA rule specifically governs the security of electronic protected health information (ePHI)?

Accepted Answer

The Security Rule

Answer

The HIPAA Security Rule establishes national standards to protect ePHI that is created, received, used, or maintained by covered entities.

Question 3

An Epic user shares their login credentials with a colleague covering their shift. This is a violation of which security principle?

Accepted Answer

Accountability and non-repudiation

Answer

Sharing credentials undermines accountability and non-repudiation, since actions can no longer be traced to the individual who performed them.

Question 4

A hospital employee accesses the medical record of a celebrity patient out of curiosity, without clinical need. This is best described as a violation of:

Accepted Answer

The minimum necessary standard

Answer

The minimum necessary standard requires that access to PHI be limited to only what is required to accomplish the intended purpose.

Question 5

Which of the following is an example of a physical safeguard required by the HIPAA Security Rule?

Accepted Answer

Workstation screens positioned to prevent unauthorized viewing

Answer

Workstation positioning to prevent unauthorized viewing is a physical safeguard that controls physical access to systems containing ePHI.

Epic Skills Assessment Practice Test

Epic Skills Assessment Practice Test

Epic Skills Assessment Information Security & HIPAA Compliance 1