HIPAA Administrative Safeguards 3

Question 1

Which of the following is an ADDRESSABLE implementation specification under the Security Management Process standard?

Accepted Answer

Information system activity review

Answer

Information system activity review is an addressable specification, meaning entities must assess whether it is reasonable and appropriate given their environment.

Question 2

A small medical practice decides not to implement an addressable specification. What must they do?

Accepted Answer

Document the reason and implement an equivalent alternative if reasonable

Answer

If an addressable specification is not implemented, the entity must document why it is not reasonable and appropriate and whether an equivalent alternative measure has been implemented.

Question 3

What is the scope of HIPAA's workforce training requirement under Administrative Safeguards?

Accepted Answer

All workforce members, including volunteers and trainees

Answer

Security awareness training must be provided to all workforce members, including management, regardless of whether they directly handle ePHI.

Question 4

Under the Security Management Process, what is the purpose of 'information system activity review'?

Accepted Answer

To audit logs, access reports, and security incident tracking reports

Answer

Information system activity review involves regularly reviewing records of activity such as audit logs and access reports to detect security incidents.

Question 5

A covered entity undergoes a merger. Which Administrative Safeguard process must be updated to reflect the new organizational structure?

Accepted Answer

Security policies and procedures, including risk analysis

Answer

A merger constitutes a significant operational change that triggers a review and update of security policies and procedures, including a new or updated risk analysis.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Administrative Safeguards 3