RHIT - Health Information Privacy and Secuirty

What type of Safeguard is Security Management Process, assigned security responsibility, workforce security, information access management?

What type of safe guards are workforce security awareness and training, security incident procedures, contingency plans, evaluation, business associate's agreement

What are some physical safeguards

What are technical safegaurds

You are reviewing your privacy security policies, procedures, training program, and so on, and comparing them to the HIPAA and ARRA regulations you are conducting

A patient has submitted an authorization to release information to a physician office for continues care. The ROI clerk wants to limit the information provided because of the minimum necessary rule. What should the supervisor tell the clerk?

Processing a request for medical information- The record contains op note and discharge summary from another hospital. Is it included ?

Would a policy on requirements for a valid authorization include the following:
A. Expiration
B. Request for an accounting of disclosure
C. Statement or right to revoke
D. Description of information to be disclosed

A contingency plan includes which of the following:
A. data quality
B. System Analysis
C. Disaster Planning
D. Hiring practices

Patient Authorization is required to release to the:
A. PHI to the patient's attorney
B. PHI that is relevant to national security 
C. Law enforcement who needs it to identifiy a suspect 
D. PHI t the patient family physician for follow-up

Which of the following would a facility employ for access control?
1. automatic log-off
2. Authentication
3. integrity controls
4. unique user identification

ARRA mandates the a CE must comply with  a requested restriction unless it meets one of the exceptions

Margot looked up information on her ex-sister in-law  A routine audit discovered the violation under ARRA can she be prosecuted

Which security measure utilizes finger prints or retina scans?

Which of the following should the record destruction program include:
A. the method of destruction
B. The name of the supervisor of the person destroying the records
C. citing the laws followed
D. requirement of daily destruction

The HIPPA security rule does not require specific tech to be used but rather provides direction on the outcome which is?

A mechanism to ensure the PHI has not been altered or destroyed inappropriately has been established. This process is called.

The computer system containing the electronic health record was located in a room that was flooded and is inoperable. What would be implemented

You are destroying PHI contained in the systems old server before it is trashed. Which method should you use

Which of the following is subjected to the HIPAA security rule
A. Paper medical Record
B. doc faxed to the facility
C. Copy of discharge summary
D. scanned op report on a CD

Which of the following would require authorization before disclosing the PHI
A. Authorization to the Bureau of Disability Dertermination.
B. Health oversight activity
C. Worker's comp
D. Public health activities

A covered enity

What is the accidental destruction of a record that is involved in a medical malpractice suit

You have been asked to explain the purpose of the new secruity awareness program your response is

Our web service was attacked by malware that overloaded it. What type of malware was this?

A data use agreement is requied when

What type of digital signature uses encryption

Today is August 30, 2011 when can HIPAA training records be destroyed

you just learned that one of your business associates is out of compliance with your contract and with the privacy rule. What do you do?

Which of the following is subjected to the HIPAA security rule?
A. faxed records
B. x-ray films
C. Paper medical records
D. clinical data repository

you work for an organization that publishes a health informatin management journal and provides clearinghouse services what must you do

Document the destruction with