Mixed Deck — All IAHSS Topics Flashcards

According to IAHSS guidelines and industry data, which area of a hospital is typically at the highest risk for workplace violence?

Answer: The emergency department.

Numerous studies and reports, including data referenced by IAHSS, consistently identify the emergency department (ED) as the location with the highest frequency of workplace violence incidents in healthcare. This is due to a combination of factors including high-stress situations, long wait times, and the presence of individuals under the influence or experiencing behavioral health crises.

Which of the following is a key responsibility of a healthcare facility under the OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030)?

Answer: Providing and ensuring the use of personal protective equipment (PPE) for officers who may be exposed to body fluids.

The OSHA Bloodborne Pathogens Standard requires employers to protect workers with occupational exposure by providing, at no cost, appropriate personal protective equipment (PPE) such as gloves, gowns, and masks. While Hepatitis B vaccination must be offered, it is not mandatory for the employee to accept. Testing is done post-exposure, not annually for all, and the OSHA 300 log is typically a facility-wide responsibility.

A comprehensive security risk assessment for a healthcare facility analyzes three primary components to determine the level of risk for a specific asset or area. Which of the following correctly identifies these three components?

Answer: Threat, Vulnerability, and Impact

The standard formula for a security risk assessment involves evaluating the relationship between Threat (a potential event or aggressor), Vulnerability (a weakness that can be exploited), and Impact (the severity of loss or damage if the threat is realized). The other options list controls, data sources, or security systems, not the core components of the risk calculation itself.

A hospital is activating its Hospital Incident Command System (HICS) in response to a mass casualty event. Which of the following represents the five core management functions established under HICS?

Answer: Command, Operations, Planning, Logistics, and Finance/Administration

The Hospital Incident Command System (HICS) is built around five major management functions: Command (sets objectives and priorities), Operations (conducts the tactical response), Planning (collects and evaluates information), Logistics (provides resources and services), and Finance/Administration (monitors costs and provides accounting support).

A healthcare security manager is conducting a post-incident review after a violent event in the ED. What is the PRIMARY goal of this review?

Answer: To identify contributing factors and implement corrective actions to prevent recurrence

The primary goal of a post-incident review is to identify contributing factors and implement corrective actions to prevent recurrence, focusing on system improvement rather than individual blame.

Under the IAHSS Healthcare Security Industry Guidelines, a 'Behavioral Emergency Response Team' (BERT) is primarily responsible for:

Answer: Responding to and de-escalating behavioral health crises to prevent violence

A Behavioral Emergency Response Team (BERT) is trained specifically to respond to and de-escalate behavioral health crises, reducing reliance on physical restraint and preventing violence.

Which of the following behaviors is considered a 'proximal warning sign' of imminent workplace violence?

Answer: A patient clenching fists and invading the personal space of staff

Clenching fists and invading personal space are proximal warning signs of imminent violence, indicating immediate threat potential that requires immediate intervention.

Following a serious security breach in the pharmacy, the hospital's risk management team initiates a Root Cause Analysis (RCA). What is the primary focus of this analysis?

Answer: Identifying and correcting underlying system-level vulnerabilities.

The primary goal of a Root Cause Analysis (RCA) is to move beyond individual errors and identify the underlying systemic problems that allowed an adverse event to occur. The focus is on prevention by fixing the system, not on blaming individuals.

What is the relationship between employees and management sometimes called?

Answer: Employee relations

The relationship between employees and management is commonly referred to as employee relations. This term encompasses the various interactions, policies, and practices that define how an organization manages its workforce. Effective employee relations are vital for fostering a positive work environment and ensuring smooth operations.

What is the primary purpose of a Threat Assessment Team (TAT) in a healthcare organization?

Answer: To evaluate and manage credible threats of violence before they escalate

A Threat Assessment Team evaluates and manages credible threats of violence before they escalate, using a multidisciplinary approach to mitigate risks proactively.

A hospital is experiencing a series of thefts from vehicles in its multi-level parking garage at night. From a Crime Prevention Through Environmental Design (CPTED) perspective, which of the following actions would be the MOST effective long-term strategy?

Answer: Upgrading lighting to eliminate dark areas and improving the quality of video surveillance coverage.

The correct answer aligns with the core CPTED principle of 'Natural Surveillance,' which focuses on designing environments where people and activities can be easily observed. Upgrading lighting and improving video surveillance increases the potential for observation, making criminals feel more visible and thus deterring criminal activity more effectively and consistently than intermittent patrols or access restrictions that don't apply to all users.

A nurse in the behavioral health unit discreetly presses a button on their ID badge, which sends a silent alarm to the security operations center with their precise location. What type of electronic security device is this?

Answer: A personal duress alarm.

A personal duress alarm is a device, often wearable, that allows an individual to discreetly summon immediate assistance when facing a personal safety threat, without escalating the situation. This is distinct from alarms that monitor physical spaces or infrastructure.

A security officer responds to a fire alarm in a patient care area. Upon arrival, the officer sees smoke but no visible flames. Following the 'RACE' protocol, what is the officer's immediate priority?

Answer: Rescue anyone in immediate danger.

The 'RACE' acronym stands for Rescue, Alarm, Confine, Extinguish/Evacuate. The absolute first priority in any fire situation is to rescue anyone who is in immediate danger from the fire or smoke. After ensuring human life is safe, the subsequent steps of activating the alarm (if not already done), confining the fire by closing doors, and then attempting to extinguish (if safe and trained to do so) can be taken.

A healthcare facility experiences an unexpected patient death unrelated to the natural course of the patient's illness. According to The Joint Commission, how is this event classified?

Answer: A sentinel event

The Joint Commission defines a sentinel event as an unexpected occurrence involving death or serious physical or psychological injury, or the risk thereof. Such events are called 'sentinel' because they signal the need for immediate investigation and response. An unanticipated death not related to the patient's underlying condition fits this definition precisely.

Why are vendors potentially a high security risk to a healthcare facility?

Answer: Vendors often have access to sensitive areas yet staff of the healthcare organization may know very little about vendor's background.

Vendors frequently require access to various parts of a healthcare facility, including sensitive areas like operating rooms, pharmacies, or data centers, to perform their services. The risk arises because the facility may not have thoroughly vetted these individuals, making them potential vectors for theft, security breaches, or other illicit activities due to their unsupervised access.

A hospital's emergency management team gathers in a conference room to discuss their response to a simulated earthquake scenario. They review the emergency plan and talk through their roles and responsibilities without deploying any actual resources or personnel. According to the Homeland Security Exercise and Evaluation Program (HSEEP), what type of exercise is being conducted?

Answer: Tabletop Exercise

A Tabletop Exercise (TTX) involves key personnel discussing simulated scenarios in an informal setting. It is a discussion-based exercise designed to assess plans, policies, and procedures without the deployment of resources, which perfectly describes the scenario.

Under IAHSS standards, what is a key component of a Workplace Violence Prevention Program (WVPP)?

Answer: Regular risk assessments to identify hazards and vulnerabilities

Regular risk assessments to identify hazards and vulnerabilities are a key component of a WVPP, enabling organizations to proactively address potential threats.

An employee reports receiving repeated threatening text messages from a former coworker. This situation BEST represents which type of workplace violence?

Answer: Type III - Worker-on-Worker

Type III workplace violence is worker-on-worker violence, which includes threats or acts of violence between current or former employees.

Which of the following is a key component of a healthcare facility's Emergency Management plan?

Answer: Procedures for interacting with local law enforcement and other first responders during a crisis.

An effective Emergency Management plan must include clear protocols for collaboration and communication with external agencies, such as police, fire, and emergency medical services (EMS). This ensures a coordinated and efficient response to a large-scale emergency or disaster. While other options are part of hospital operations, they are not foundational components of the emergency response plan itself.

When handling a telephoned bomb threat, which of the following is the most crucial action for the person receiving the call to take?

Answer: Keep the caller on the line as long as possible and gather information using a checklist.

Standard bomb threat protocols emphasize keeping the caller on the line to gather as much intelligence as possible. Using a pre-established bomb threat checklist helps the recipient ask for key details (location, time, type of bomb) and note background noises or voice characteristics, which is vital for assessing the threat's credibility.