Administrative, Physical & Technical Safeguards Flashcards
7 cards from real CHP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Administrative, Physical & Technical Safeguards flashcards as text
Which of the following best describes a physical safeguard under the HIPAA Security Rule?
Answer: A locked server room with keycard access
Physical safeguards are physical measures to protect electronic information systems and related buildings from unauthorized access, such as locked server rooms with keycard entry.
Under the HIPAA Security Rule's facility access controls standard, which of the following is an addressable implementation specification?
Answer: All of the above
Contingency operations, facility security plan, and access control and validation procedures are all addressable implementation specifications under the facility access controls standard.
A clinic uses mobile workstations that move between patient rooms. Which HIPAA physical safeguard standard is most relevant to securing these devices?
Answer: Workstation security
Workstation security requires physical safeguards for workstations that access ePHI, such as positioning screens away from public view and securing mobile units.
When a covered entity disposes of a hard drive containing ePHI, which HIPAA standard governs this activity?
Answer: Device and media controls
Device and media controls require covered entities to implement policies for the final disposition of ePHI and the hardware or media on which it is stored.
A healthcare organization plans to relocate its data center. Under HIPAA physical safeguards, which process must be documented?
Answer: Accountability tracking of hardware and media movement
Device and media controls require accountability records that track movements of hardware and electronic media containing ePHI.
Which of the following is a required (not addressable) implementation specification under the HIPAA workstation use standard?
Answer: Policies specifying proper functions of workstations and how they are used
The workstation use standard requires covered entities to document the functions workstations perform and the manner in which those functions are performed — this is a required specification.
A visitor enters a hospital's health information management department and views ePHI on an unattended screen. Which physical safeguard failure does this represent?
Answer: Failure of workstation security measures
Workstation security requires physical safeguards to restrict access to authorized users, including positioning screens to prevent unauthorized viewing.