CERTIFIED IN HEALTHCARE PRIVACY
AND SECURITY (CHPS) EXAM
PREPARATION
Which of the following documents defines procedures that allow access to a
facility to assist with support and restoration of lost data defined in the disaster-
recovery plan. - ANSWERS-Contingency plan
The implementation of a visitor check in process is an example of which of the
following requirements? - ANSWERS-Facility security plan
The two types of processes that allow for PHI to be considered unusable,
unreadable, or indecipherable are - ANSWERS-encryption and destruction
An organization implements a process where the EHR will terminate access after
15 minutes of inactivity. This is an example of - ANSWERS-automatic logoff
If a data breach at a hospital occurred on September 25,02015, that impacted 245
individuals, when is the latest possible date that the hospital can inform the
Department of Health and Human Services of the data breach? - ANSWERS-
February 29, 2016
,Anytown Clinic had a data breach that occurred on March 2, 2016 that impacted
756 individuals. What is the latest possible date that the hospital can inform the
Department of Health and Human Services regarding the date breach? -
ANSWERS-May 1, 2016
During a breach investigation, which of the following questions must be answered
during the breach risk assessment? - ANSWERS-The unauthorized individual who
used the PHI or whom it was disclosed to
After conduction a breach investigation, it was determined that a workforce
member was the root cause to the date breach. The best course of action would
be to - ANSWERS-Apply appropriate sanctions to the workforce member
ABC Hospital was providing notification for a data breach that impacted 783
people. During the notification processes, it was determined that the organization
had outdated contract information on 29 of the individuals. What is the next
process for the covered entity? - ANSWERS-Post the breach on the company
website
The HIPAA privacy officer was just informed of a potential data involving a
workforce member looking through a patient record with no business need. What
should be the first step to determine if access happened? - ANSWERS-Run an
audit report
A business associate discovered a potential data breach on July 15, 2015, and
confirmed it was a data breach on August 18, 2015. When is the business
associate required to notify the covered entity of the data breach? - ANSWERS-
, Without unreasonable delay and no later than 60 dates from the date of
discovery
A law enforcement officer has requested in writing that a covered entity delay
notification of a data breach as it might impede in an investigation. How long
should the covered entity delay the notification? - ANSWERS-By the amount time
specified in the request.
An organization just finished notification about a data breach and was informed
that four individuals' contact information was out of date. How should the
organization provide notification to the individuals? - ANSWERS-They can provide
an alternative form of notice such as telephone or other means.
When conducting the risk assessment during a breach investigation, which of the
following must be determined? - ANSWERS-Extent to which the risk to PHI has
been mitigated.
Evaluating effectiveness of a new technology three months after implementation
is an example of - ANSWERS-evaluation
Written notification to individuals regarding a breach that occured must be
completed no late than 60 days from the date of discovery by - ANSWERS-first
class mail or e-mail
A workforce member discovered a potential data breach on June 2, 2016, and
notified the HIPAA security officer on June 23, 2016. When is the last day when
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Teacher101. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $17.99. You're not tied to anything after your purchase.