HCISPP Online Practice Questions and Answers

Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

A. poor governance over security processes and procedures

B. immature security controls and procedures

C. variances against regulatory requirements

D. unanticipated increases in security incidents and threats

Business Associates

A. are entities that perform services that require the use of Protected Health Information on behalf of Covered Entities. One covered entity may be a business partner of another covered entity

B. are entities that do not perform services that require the use of Protected Health Information on behalf of Covered Entities. One covered entity may be a business partner of another covered entity

C. are entities that perform services that require the use of Encrypted Insurance Information on behalf of Covered Entities. One covered entity may be a business partner of another covered entity

D. are entities that perform services that require the use of Protected Health Information on behalf of Covered Entities. One covered entity cannot be a business partner of another covered entity.

A gap analysis for the Transactions set does not refer to

A. the practice of identifying the data content you currently have available through your medical software

B. the practice of and comparing that content to what is required by HIPPA, and ensuring there is a match.

C. and requires that you study the specific format of a regulated transaction to ensure that the order of the information when sent electronically matches the order that is mandated in the Implementation Guides.

D. but does not require that you study the specific format of a regulated transaction to ensure that the order of information when sent electronically matches the order that is mandated in the Implementation Guides.

An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?

A. Development, testing, and deployment

B. Prevention, detection, and remediation

C. People, technology, and operations

D. Certification, accreditation, and monitoring

Which of the following forces remains relatively stable, and major shifts in this area would be necessary to bring about any fundamental change in the US health care delivery system?

A. Economic forces

B. Political change

C. Beliefs and values

D. Social forces

Compared to other industrialized countries, the United States' health care system is.

A. The most costly

B. The least universal

C. Both a and b

D. Neither a or b

Excessive health care is a concern because it is.

A. Wasteful

B. Costly

C. Potentially harmful

D. All of the above

Price inflation has been a major contributor to the rise of health care costs in the recent decades.

This inflation has been due to:

A. Prices of health care rising more rapidly than prices in the overall economy.

B. An increase in the quantities of health care utilized relative to increases in the overall quantity of goods and services.

C. Both A and B

D. Factors other than price or quantity of health care.

The continuous quality improvement model (CQI) seeks to.

A. improve access to care

B. develop formalized standards of care

C. separate financial and clinical decisions

D. focus on individual caregivers

Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis. Which element is NOT part of risk analysis?

A. Developing adequate communication with all contractors, interns, and staff in relation to the agency's security policies

B. Assessing vulnerabilities of integrity and availability of electronic personal health information

C. Determining how client electronic personal health information confidentiality may be compromised

D. Determining barriers in existence to needed client electronic personal health information

Under HIPAA, Regional Health Information Organizations and Personal Health Record Vendors are considered to be:

A. Health care clearinghouses

B. Business associates

C. Covered entities

D. Personal health care vendors

Discovered the immunity to small pox.

A. Edward Jenner

B. Robert Koch

C. Hippocrates

__________ Collects cancer Data.

A. Health Information Manager

B. Cancer Registrar

C. Coder

PHI stands for Private Health Information.

A. True

B. False

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

A. True

B. False