HIPAA Administrative Safeguards 2

Question 1

Under HIPAA's Administrative Safeguards, what is the primary purpose of a contingency plan?

Accepted Answer

To respond to emergencies that damage systems containing ePHI

Answer

The contingency plan standard requires covered entities to establish policies for responding to emergencies or disasters that damage systems containing ePHI.

Question 2

Which component of the contingency plan addresses how a covered entity will continue operating in the event of a system failure?

Accepted Answer

Emergency mode operation plan

Answer

The emergency mode operation plan is required to enable continuation of critical business processes for protection of the security of ePHI during system failure.

Question 3

A hospital's security officer discovers that a workforce member accessed patient records without authorization. Under Administrative Safeguards, what must occur?

Accepted Answer

The hospital must apply appropriate sanctions against the workforce member

Answer

The sanction policy standard requires covered entities to apply appropriate sanctions against workforce members who fail to comply with security policies.

Question 4

What does the 'assigned security responsibility' standard under Administrative Safeguards require?

Accepted Answer

One individual must be identified as responsible for security policies and procedures

Answer

Covered entities must identify one person — often called the Security Officer — who is responsible for developing and implementing security policies.

Question 5

Under HIPAA, an authorization and/or supervision implementation specification requires covered entities to:

Accepted Answer

Supervise workforce members who work with ePHI

Answer

Workforce members who work with ePHI must be supervised as appropriate, especially those working in locations with physical access to facilities with ePHI.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Administrative Safeguards 2