Free IAHSS Risk, Safety, and Compliance Questions and Answers — Questions and Answers
Question 1: A security officer is posted at a busy emergency department entrance when a news reporter asks for the condition of a patient reportedly transported from a high-profile car accident. What is the officer's most appropriate response according to HIPAA regulations?
- Confirm the patient's presence but decline to provide their condition.
- State "I cannot confirm or deny that any specific patient is in our care" and refer the reporter to the hospital's Public Information Officer. (Correct answer)
- Check the patient directory and, if the patient has not opted out, provide their one-word condition.
- Request that the reporter have a seat and ask the charge nurse to provide an update.
Correct answer: State "I cannot confirm or deny that any specific patient is in our care" and refer the reporter to the hospital's Public Information Officer.
According to HIPAA, confirming or denying a patient's presence without their prior authorization is a violation of their privacy, especially to the media. The correct protocol is to neither confirm nor deny the patient's presence and to direct all media inquiries to the designated hospital spokesperson, typically the Public Information Officer or Media Relations department.
Question 2: A comprehensive security risk assessment for a healthcare facility analyzes three primary components to determine the level of risk for a specific asset or area. Which of the following correctly identifies these three components?
- Policies, Procedures, and Staffing
- Incidents, Accidents, and Audits
- Threat, Vulnerability, and Impact (Correct answer)
- Access Control, Video Surveillance, and Alarms
Correct answer: Threat, Vulnerability, and Impact
The standard formula for a security risk assessment involves evaluating the relationship between Threat (a potential event or aggressor), Vulnerability (a weakness that can be exploited), and Impact (the severity of loss or damage if the threat is realized). The other options list controls, data sources, or security systems, not the core components of the risk calculation itself.
Question 3: During a security patrol of a newly renovated behavioral health unit, an officer notices that the patient room doors are equipped with standard lever-style handles. From a patient safety and compliance perspective, why is this a significant concern?
- The handles can be easily broken, creating a security breach.
- Lever handles are not compliant with the Americans with Disabilities Act (ADA).
- They are more difficult to clean and sanitize than traditional doorknobs.
- They present a significant ligature risk for patients who are at risk of self-harm. (Correct answer)
Correct answer: They present a significant ligature risk for patients who are at risk of self-harm.
Regulatory and accrediting bodies like CMS and The Joint Commission place a high emphasis on creating a "ligature-resistant" environment in behavioral health settings to prevent patient self-harm. Standard lever-style door handles are considered a significant ligature point. While other options might be minor concerns, the immediate life-safety risk of ligature is the primary compliance issue.
Question 4: Which of the following is a key responsibility of a healthcare facility under the OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030)?
- Providing and ensuring the use of personal protective equipment (PPE) for officers who may be exposed to body fluids. (Correct answer)
- Administering mandatory Hepatitis B vaccinations to all security officers upon hiring.
- Annually testing all security officers for bloodborne pathogens regardless of exposure incidents.
- Maintaining the official OSHA 300 Log exclusively for security-related injuries.
Correct answer: Providing and ensuring the use of personal protective equipment (PPE) for officers who may be exposed to body fluids.
The OSHA Bloodborne Pathogens Standard requires employers to protect workers with occupational exposure by providing, at no cost, appropriate personal protective equipment (PPE) such as gloves, gowns, and masks. While Hepatitis B vaccination must be offered, it is not mandatory for the employee to accept. Testing is done post-exposure, not annually for all, and the OSHA 300 log is typically a facility-wide responsibility.
Question 5: A 'Code Green' is announced for an elderly patient with dementia, who is a known elopement risk, missing from a third-floor unit. What should be the security officer's immediate priority upon receiving this information?
- Secure all exterior exit doors and monitor the main hospital egress points.
- Immediately begin reviewing CCTV footage from the past hour to trace the patient's movements.
- Initiate a rapid, systematic search of the patient's unit and adjacent areas, including unoccupied rooms and stairwells. (Correct answer)
- Interview the patient's roommate and family members to determine potential destinations.
Correct answer: Initiate a rapid, systematic search of the patient's unit and adjacent areas, including unoccupied rooms and stairwells.
In an elopement event, time is critical, and the highest probability is that the patient is still on or near their unit. The immediate priority is a rapid and systematic search of the immediate vicinity (the unit, adjacent stairwells, lounges, etc.) in coordination with clinical staff. Securing exits and reviewing video are crucial secondary steps, but an immediate physical search of the most probable area is the first action to take.
Question 6: When a forensic patient (an individual in law enforcement custody) is receiving treatment in the hospital, who holds the primary responsibility for preventing the patient's escape?
- The law enforcement agency that has the patient in custody. (Correct answer)
- The hospital security department, which assumes custody upon the patient's admission.
- The attending clinical staff, who have direct control over the patient's care.
- A joint responsibility shared equally between hospital security and the law enforcement agency.
Correct answer: The law enforcement agency that has the patient in custody.
The legal custody of a forensic patient remains with the escorting law enforcement agency. While hospital security has a critical role in collaboration and overall site safety, the primary responsibility for custody and prevention of escape rests with the law enforcement officers. Hospital security assists but does not assume legal custody.
Free IAHSS Risk, Safety, and Compliance Questions and Answers
A security officer is posted at a busy emergency department entrance when a news reporter asks for the condition of a patient reportedly transported from a high-profile car accident.
What is the officer's most appropriate response according to HIPAA regulations?