HAC Healthcare Analyst Risk Assessment & Compliance 2

Question 1

Which federal law requires healthcare organizations to implement administrative, physical, and technical safeguards to protect electronic PHI?

Accepted Answer

HIPAA Security Rule

Answer

The HIPAA Security Rule specifically mandates administrative, physical, and technical safeguards for electronic protected health information (ePHI).

Question 2

A healthcare analyst discovers that a vendor accessing patient data has not signed a Business Associate Agreement (BAA). What is the primary compliance risk?

Accepted Answer

HIPAA breach due to unauthorized PHI disclosure

Answer

Without a signed BAA, any vendor access to PHI constitutes an unauthorized disclosure under HIPAA, creating significant breach liability.

Question 3

In healthcare risk assessment, what does the term 'residual risk' refer to?

Accepted Answer

Risk remaining after mitigation controls are implemented

Answer

Residual risk is the level of risk that remains after an organization has applied its risk management and mitigation controls.

Question 4

Which CMS program penalizes hospitals for excessive rates of hospital-acquired conditions (HACs)?

Accepted Answer

HAC Reduction Program

Answer

The CMS Hospital-Acquired Condition (HAC) Reduction Program penalizes hospitals in the worst-performing quartile for HAC rates with a 1% payment reduction.

Question 5

An analyst is assessing compliance risk related to physician self-referrals. Which law is most directly applicable?

Accepted Answer

Stark Law (Physician Self-Referral Law)

Answer

The Stark Law (42 U.S.C. § 1395nn) directly prohibits physicians from referring Medicare patients to entities with which they have a financial relationship unless an exception applies.

(HAC) Healthcare Analyst Certification Practice Test

(HAC) Healthcare Analyst Certification Practice Test

HAC Healthcare Analyst Risk Assessment & Compliance 2