HAC Healthcare Analyst Risk Assessment & Compliance 2

Question 1

Which federal law requires healthcare organizations to implement administrative, physical, and technical safeguards to protect electronic PHI?

Accepted Answer

HIPAA Security Rule

Answer

HITECH Act

Answer

Stark Law

Answer

False Claims Act

Question 2

A healthcare analyst discovers that a vendor accessing patient data has not signed a Business Associate Agreement (BAA). What is the primary compliance risk?

Accepted Answer

HIPAA breach due to unauthorized PHI disclosure

Answer

Violation of the Stark Law

Answer

Medicare fraud under the False Claims Act

Answer

Violation of the Anti-Kickback Statute

Question 3

In healthcare risk assessment, what does the term 'residual risk' refer to?

Accepted Answer

Risk remaining after mitigation controls are implemented

Answer

Risk eliminated after controls are applied

Answer

Risk transferred to a third-party insurer

Answer

Inherent risk before any analysis

Question 4

Which CMS program penalizes hospitals for excessive rates of hospital-acquired conditions (HACs)?

Accepted Answer

HAC Reduction Program

Answer

Hospital Value-Based Purchasing Program

Answer

Hospital Readmissions Reduction Program

Answer

Merit-based Incentive Payment System

Question 5

An analyst is assessing compliance risk related to physician self-referrals. Which law is most directly applicable?

Accepted Answer

Stark Law (Physician Self-Referral Law)

Answer

Anti-Kickback Statute

Answer

False Claims Act

Answer

Emergency Medical Treatment and Labor Act

Question 6

What is the purpose of a healthcare organization's compliance hotline?

Accepted Answer

To provide an anonymous channel for reporting suspected violations

Answer

To report billing codes to CMS directly

Answer

To communicate regulatory updates to staff

Answer

To submit prior authorization requests to payers

Question 7

Under OIG guidelines, which element is NOT one of the seven components of an effective compliance program?

Accepted Answer

Mandatory profit-sharing agreements with physicians

Answer

Written policies and procedures

Answer

Designated compliance officer

Answer

Effective lines of communication