Basic CPHRM Flashcards

Which federal law requires healthcare organizations to implement administrative, physical, and technical safeguards to protect electronic protected health information (ePHI)?

Answer: HIPAA Security Rule

The HIPAA Security Rule mandates specific safeguards—administrative, physical, and technical—to protect ePHI.

A hospital's risk manager receives a report that a nurse administered the wrong medication dose. What is the FIRST step in the risk management process?

Answer: Identify and analyze the event

Risk management begins with identifying and analyzing the event to understand what occurred before taking further action.

In healthcare risk management, 'frequency' of a risk refers to:

Answer: How often a particular loss event is expected to occur

Frequency measures how often a loss event is likely to occur, which is a key factor in risk prioritization.

Which committee typically has primary oversight responsibility for an organization's enterprise risk management program?

Answer: Board of Directors or Trustees

The Board of Directors or Trustees holds ultimate governance responsibility for enterprise risk management.

A root cause analysis (RCA) is best described as:

Answer: A structured method to identify underlying system factors contributing to an adverse event

RCA is a systematic process that identifies the fundamental system-level causes of adverse events rather than focusing on individual blame.

Which of the following BEST describes 'loss prevention' as a risk financing strategy?

Answer: Reducing the likelihood that a loss event will occur

Loss prevention focuses on reducing the probability that a harmful event will occur in the first place.

Under the doctrine of respondeat superior, a hospital can be held liable for:

Answer: Negligent acts of employees committed within the scope of employment

Respondeat superior holds employers vicariously liable for employees' negligent acts performed within the scope of their employment.