HIM EXAM 12 AND 13 | 143 QUESTIONS |
WITH PASSED ANSWERS!!
Describe the purposes of the HIPAA Security Rule Answer - Governs PHI that is
transmitted by or maintained in some form of electronic media
-Implement appropriate security safeguards and protect electronic healthcare
information that may be at risk
-Protect an individual's health information while permitting appropriate access
and use of that information
Summarize the components of the Security Rule Answer - 1) General
Requirements:
2)Flexibility or Approach: Allow CE and BA to implement the standards
3)Standards: CE and BA must comply with standards (administrative, physical,
technical, organizational, and policies, procedures, and documentation)
4)Implementation specifications: Detailed instructions for implementing a
specific standard
5)Maintenance of security measures: Continuing review of the reasonableness
and appropriateness of a CE or BA security measure
Recognize security components for risk management Answer - -Must
implement security measures that reduce risks and vulnerabilities to a
reasonable and appropriate level to comply with the security standards
CEs can decide to comply with only the Privacy Rule and don't have to comply
with the
Security Rule? Answer - False
,The goal of the Security Rule is to ensure that patient information is protected
from
unauthorized access, alteration, deletion, and transmission? Answer - True
The safeguard requirements in the Privacy Rule are equivalent to compliance
with the Security
Rule? Answer - False
Computers storing ePHI that are easily assessable to the public pose a
vulnerability to a CE? Answer - True
Only healthcare providers are required to comply with the Security Rule?
Answer - False
The Security Rule contains provisions that CEs can ignore? Answer - False
Security awareness training is required every two years? Answer - False
The Security Rule is completely technical and requires computer programmers
to address? Answer - False
The Security Rule contains both required and addressable standards? Answer -
True
Addressable Specification Answer - The implementation specifications of the
HIPAA Security Rule that are designated as addressable rather than required
-To be in compliance with the rule, the CE must implement the specification as
written, implement an alternative, or document that the risk does not exist in
the organization or exists with little probability of occurrence
, American Recovery and Reinvestment Act of 2009 Answer - Federal legislation
that included significant funding for health information technology and
provided for significant changes to the HIPAA Privacy Rule
Automatic Log Off Answer - A security procedure that causes a computer
session to end after a predetermined period of inactivity (EX: 10 min)
Business Associate (BA) Answer - A person or organization other than a
member of a CE workforce that performs functions or activities on behalf of or
affecting a CE that involve the use or disclosure of individually identifiable
health information
Confidentiality Answer - A legal and ethical concept that establishes the
healthcare provider's responsibility for protecting health records and other
personal and private information from unauthorized use or disclosure
Covered Entity Answer - Persons or organizations that must comply with the
HIPAA privacy and security rules
-Including healthcare providers, health plans, and healthcare clearinghouses
Electronic Protected Health Information (ePHI) Answer - Under HIPAA, all
individually identifiable information that is created or received electronically by
a healthcare provider r any other entity subject to HIPAA requirements
Encryption Answer - A technique used to ensure that data transferred from
one location on a network to another are secure from eavesdropping or
interception
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller EvaTee. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $23.99. You're not tied to anything after your purchase.