Safety and Compliance Flashcards

PCI DSS requires that physical access data such as CCTV footage for sensitive areas be retained for at least how long, unless otherwise restricted by law?

Answer: 90 days

PCI DSS requires video or access control data for sensitive areas to be stored for at least three months.

Which HIPAA rule requires covered entities to implement facility access controls to protect electronic protected health information?

Answer: Security Rule

The HIPAA Security Rule includes physical safeguards such as facility access controls and workstation security.

A fail-secure electric strike is most appropriate for which application?

Answer: A server room door where security must be maintained during power loss, with free mechanical egress

Fail-secure hardware stays locked on power loss and is suitable where free egress is provided mechanically from the secure side.

How long must employers generally retain OSHA 300 injury and illness logs?

Answer: 5 years following the end of the calendar year

OSHA recordkeeping rules require the 300 log, 300A summary, and 301 forms to be kept for five years.

Which OSHA standard requires security personnel who may be exposed to blood during first aid or use-of-force incidents to be covered by an exposure control plan?

Answer: 29 CFR 1910.1030 Bloodborne Pathogens

The Bloodborne Pathogens Standard applies to employees with reasonably anticipated occupational exposure to blood.

Which code is the primary reference for installation and testing of fire alarm and emergency communication systems?

Answer: NFPA 72

NFPA 72 is the National Fire Alarm and Signaling Code.

Who is ultimately responsible for approving a locking arrangement that deviates from standard life safety egress requirements?

Answer: The Authority Having Jurisdiction (AHJ)

The AHJ, usually the local fire marshal or building official, approves code variances and special locking arrangements.