#1
Which of the following is an example of a healthcare data breach?
A patient's medical records accessed by an unauthorized employee
ExplanationUnauthorized access to patient data is a breach, compromising privacy and security.
#2
What does HIPAA stand for?
Health Insurance Portability and Accountability Act
ExplanationHIPAA safeguards patient privacy and ensures data security in healthcare.
#3
What is the primary purpose of healthcare information security?
To protect patient data from unauthorized access, use, or disclosure
ExplanationHealthcare info security aims to safeguard patient data from unauthorized use or access.
#4
What is the role of a Chief Information Security Officer (CISO) in healthcare organizations?
To oversee the security of healthcare information systems
ExplanationCISOs manage and ensure the security of healthcare information systems.
#5
What is the purpose of access controls in healthcare information security?
To limit access to authorized users and prevent unauthorized access to sensitive information
ExplanationAccess controls restrict data access to authorized users, preventing unauthorized entry.
#6
Which of the following is NOT a common security measure to protect healthcare information?
Openly sharing patient information
ExplanationSharing patient info openly violates confidentiality and compromises security.
#7
What is the principle of 'least privilege' in the context of healthcare information security?
Granting users only the access they need to perform their duties
ExplanationLeast privilege minimizes risks by limiting user access to necessary functions.
#8
Which of the following is a potential consequence of a healthcare data breach?
Financial penalties
ExplanationBreach consequences may include financial penalties due to non-compliance.
#9
What is the significance of conducting regular security audits in healthcare organizations?
To identify and mitigate security vulnerabilities
ExplanationAudits help identify and address security weaknesses, enhancing protection.
#10
What does PHI stand for in healthcare information security?
Protected Health Information
ExplanationPHI refers to sensitive patient data that requires protection under HIPAA.
#11
Which of the following is an example of a technical safeguard to ensure healthcare information security?
Implementing data encryption
ExplanationData encryption protects information from unauthorized access by encoding it.
#12
What is the difference between confidentiality and privacy in healthcare information security?
Confidentiality refers to the protection of patient information, while privacy refers to the right of individuals to control their own health information
ExplanationConfidentiality protects patient data, while privacy safeguards individuals' control over their health information.
#13
What is the role of a Business Associate Agreement (BAA) in healthcare information security?
To ensure compliance with HIPAA regulations when sharing PHI with third-party vendors
ExplanationBAAs ensure third-party vendors comply with HIPAA when handling PHI.
#14
Which of the following is an example of a human factor that can compromise healthcare information security?
Lack of employee awareness and training
ExplanationEmployee awareness and training reduce human errors, enhancing security.
#15
Which of the following is an example of a technical safeguard to protect healthcare information?
Data encryption
ExplanationData encryption is a technical safeguard that secures information by encoding it.