HealthCare Information Security and Privacy Practitioner HCISPP Study Guide PDF Download

1. Which of the following is the BEST reason for writing an information security policy?

2. When assessing an organization’s security policy according to standards established by the International Organization for Standardization (ISO) 27001 and 27002, when can management responsibilities be defined?

3. Provides assistance, advice and information to the patient.

4. Clients need to receive a copy of Notice of Privacy Practices.

5. A health plan may conduct its covered transactions through a clearinghouse, and may require a provider to conduct covered transactions with it through a clearinghouse. The incremental cost of doing so must be borne

6. Was known for identifying anthrax.

7. Helps people with low incomes get the necessary medical help or need. Varies from state to state.

8. Children under age 18 comprise approximately, what percentage of the homeless population?

9. True or False? Globalization of health care has produced positive effects in both developed and developing countries.

10. Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

11. A Governing board is also known as the___________.

12. Excessive health care is a concern because it is.

13. True or false: For people with Medicaid coverage, access to health care is guaranteed.

14. What data-related concept identifies or characterizes entities and events in a manner that facilitates an administrative process?

15. Which is not a "painless" cost control strategy?

16. For most privately insured Americans, health insurance is:

17. Flemming discovered The Cannon of Medicine.

18. What mandates all privacy in hospital administration?

19. Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

20. What type of hospital is an Government Hospital?

21. Jackson broke his ankle while performing with his band 100 Monkeys. Jackson was rushed to the E.R and from there he was referred to a bone specialist.

What type of care is Jackson in?

22. The Hippocratic Oath was in the Medieval time period.

23. The adequacy of the health profession workforce (ie. supply and demand) can be determined by.

24. They create and vote on bylaws

25. Surgeons usually receive a single payment for the surgery and postoperative care. This bundling, or payment per episode, gives surgeons an economic incentive to.

26. What is impact of the HITECH Act in relation to HIPAA requirements and maintaining client records electronically?

27. Business Associate Agreements are required by the regulation whenever a business associate relationship exists. This is true even when the business associates are both covered entities.

28. What does the federal Ryan White CARE Act fund?

29. Who believed that the only was to understand a disease was to examine the cells of the affected body?

30. ___________ is one of the main objectives of HIPAA.

31. Private health insurance coverage has decreased over the past decades because of.

32. The CQI approach of producing health care "report cards," specifically HEDIS is a tool to encourage health care consumers to choose high-quality caregivers, but often.

33. Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

34. Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis.

Which element is NOT part of risk analysis?

35. Courtesy allows doctors to admit an occasional patient to the hospital.

36. They examine cost of claims to determine whether it is a reasonable or necessary, according to diagnosis.

37. Critics of the United States health care system find fault with all of the following EXCEPT:

38. HIPAA guidelines say employers that sponsor employee group health plans must maintain privacy of which __________________ in secured locations, if kept in the office?

39. What is a Covered Entity? The term "Covered Entity" is defined in 160.103 of the regulation.

40. Acts on reports and recommendations from medical staff committees.

41. This type of hospital is privately owned.

42. What was the function of a pest house in the preindustrial period?

43. Which racial/ethnic group is growing the fastest?

44. If you go and get a physical exam.

What type of care did you just receive?

45. Which one of these risk factors would be the LEAST important consideration in choosing a building site for a new computer facility?

46. Confidentiality means that data is not to be made available to unauthorized persons.

47. The Flexner Report, published in 1910, reported on.

48. Part of Administrative Safeguards under HIPAA is Workforce Security measures.

Which is NOT a key element of a Workforce Security Element?

49. Regulatory strategies for health insurance financing seek to control public expenditures for health care by.

50. Breach notification exceptions are provided to all, EXCEPT:

51. Which is NOT consistent with Personnel Clearance Procedures needed to comply with HIPAA Administrative Safeguards?

52. The HIPPA task force must first

53. Which is NOT one of the three major categories of Security Safeguards identified by HIPAA in the regulations?

54. The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

55. What is the primary purpose of the National Health Service Corps?

56. This hospital is owned by corporations and makes up 15% of hospitals in the United States.

57. Which one of the following is NOT a fundamental component of a Regulatory Security Policy?

58. Approximately how many Americans are uninsured?

59. What is the meaning of the term 'Access'?

60. Which of the following information is generally considered confidential?

61. A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding.

Which of the following BEST supports this recommendation?

62. Assembly and analysis of a discharged patients record chart.

63. Copies of patient information may be disposed of in any garbage can in the facility.

64. He discovered X-Rays.

65. Is an interpretation of a law that is written by the responsible regulatory agency.

66. Which of the following is a potential risk when a program runs in privileged mode?

67. A covered healthcare provider which a direct treatment relationship with an individual need not:

68. A medical intervention lying on a steeper portion of the aggregate cost-benefit curve indicates a major benefit for a relatively modest cost.

An example of such an intervention would be:

69. The management of a rare and complex disorder such as pituitary tumors would be considered an example of.

70. The inception of _____ was used as a trial balloon for the idea of government-sponsored universal health insurance.

71. Is a list of all items of business to be discussed.

72. Which is not an underlying assumption of a theoretical model of costs and health outcomes?

73. The confidentiality of alcohol and drug abuse patient records maintained by this program is protected by federal law and regulations. Generally, the program may not say to a person outside the program that a patient attends the program, or disclose any information identifying a patient as an alcohol or drug abuser even if:

74. You always abide by the HIPAA privacy rule.

75. In a free market who would pay for the delivery of health care services?

76. A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP).

Which of the following failures should the IT manager be concerned with?

77. Health Information Rights although your health record is the physical property of the healthcare practitioner or facility that compiled it, the information belongs to you.

You do not have the right to:

78. Covered entities (certain health care providers, health plans, and health care clearinghouses) are not required to comply with the HIPPA Privacy Rule until the compliance date.

Covered entities may, of course, decide to:

79. Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider’s customers?

80. Which of the following is an overarching goal of Healthy People 2010?

81. Which of the following are some common features designed to protect confidentiality of health information contained in patient medical records?

82. The role of the government in the U.S. healthcare system is:

83. DRAG DROP

Place in order, from BEST (1) to WORST (4), the following methods to reduce the risk of data remanence on magnetic media.

84. The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

85. A multiple payer system is more cumbersome than a single payer system for all of the following reasons except:

86. Are there penalties under HIPPA?

87. Handled the first bioterrorism attack in the mail. Also replaced Health Care Financing Administration.

88. Business Associates

89. If a state or federal law or regulation grants the client greater access to their PHI, then it will preempt HIPAA.

90. You are approached by an individual who tells you that he is here to work on the computers and wants you to open a door for him or point the way to a workstation.

How do you respond to this request?

91. The primary objectives of a healthcare system include all of the following except:

92. Which of the following is a PRIMARY benefit of using a formalized security testing report format and structure?

93. Hospitals in the United States evolved from

94. Which of the following forces remains relatively stable, and major shifts in this area would be necessary to bring about any fundamental change in the US health care delivery system?

95. DRAG DROP

During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.

What is the best approach for the CISO?

Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BCDR phases to the appropriate corresponding location.

96. Which racial/ethnic group has the highest rate of uninsurance?

97. Believed that germs caused death and founded aseptic surgery.

98. A continuous information security monitoring program can BEST reduce risk through which of the following?

99. The intent of patient cost sharing at the point of receiving health care services is to.

100. Who monitors the purity of foods and safety of medicines?