Question 1

An organization implements a policy on installing software service packs on all its computers. This is an example of which type of control?

Accepted Answer

A)   Administrative
B)   Technical
C)   Physical
D)   Electronic

Question 2

What is a negative impact of the increased use of mobile devices in transmitting health data?

Accepted Answer

A)   They support increased health data access for providers.
B)   They increase the risk of a security breach.
C)   They decrease productivity.
D)   They increase the number of medication errors. B

Question 3

Which definition most accurately describes privacy?

Accepted Answer

A)   The means to ensure health record privacy and confidentiality
B)   Accuracy and completeness of health information
C)   The rights of individuals to control access to their person or information about themselves
D)   An act that has the potential to cause harm to an informational asset

Question 4

A healthcare provider forgets to update a patient's medications. Which fair information principle is being violated?

Accepted Answer

A)   Correction
B)   Openness and transparency
C)   Data quality and integrity
D)   Safeguards

Question 5

Which are examples of secondary use of health information? (Select all that apply.)

Accepted Answer

A)   Treatment
B)   Surveillance
C)   Research
D)   Marketing
E)   Prevention

Question 6

What are some examples of indirect costs to organizations that have security breaches? (Select all that apply.)

Accepted Answer

A)   Lost productivity
B)   Expensive fines
C)   Damaged public trust
D)   Remediation costs
E)   Repeating medical procedures A, C, D

Question 7

What is the difference between the safe harbor and expert determination methods of de-identifying data?

Accepted Answer

A)   The safe harbor method involves removal of 18 types of identifiers, and the expert determination method involves the application of statistical or scientific models.
B)   The safe harbor method involves the application of statistical or scientific models, and the expert determination method involves removal of 18 types of identifiers.
C)   The safe harbor method involves removal of all identifiers, and the expert determination method involves the removal of 18 types of identifiers.
D)   The safe harbor method involves securing identifiers in an encrypted database, and the expert determination specifically determines the riskiest identifiers to remove.

Question 8

Which example constitutes an internal security event?

Accepted Answer

A)   Servers containing clinical data were stolen from a facility.
B)   A person hacks into a facility's server and steals PHI electronically.
C)   A person installs a malicious code past a facility's firewall.
D)   A system administrator installed a new server without any security measures. D

Question 9

Which organization works on an international level to improve information privacy?

Accepted Answer

A)   Health and Human Services Office of Civil Rights
B)   Health Information Security and Privacy Collaboration (HISP
C)  
C)   Department of Health and Human Services (DHHS) 
D)   Electronic Frontier Foundation (EFF)

Question 10

Which principles are included in IMIA's Code of Ethics for informatics? (Select all that apply.)

Accepted Answer

A)   Information-Privacy and Disposition
B)   Openness
C)   Elimination of Threats
D)   Legitimate Infringement
E)   Accountability

Exam 26: Privacy and Security

An organization implements a policy on installing software service packs on all its computers. This is an example of which type of control?

Correct Answer
verified

What is a negative impact of the increased use of mobile devices in transmitting health data?

Correct Answer
verified
B

Which definition most accurately describes privacy?

Correct Answer
verified

A healthcare provider forgets to update a patient's medications. Which fair information principle is being violated?

Correct Answer
verified

Which are examples of secondary use of health information? (Select all that apply.)

Correct Answer
verified

What are some examples of indirect costs to organizations that have security breaches? (Select all that apply.)

Correct Answer
verified
A, C, D

What is the difference between the safe harbor and expert determination methods of de-identifying data?

Correct Answer
verified

Which example constitutes an internal security event?

Correct Answer
verified
D

Which organization works on an international level to improve information privacy?

Correct Answer
verified

Which principles are included in IMIA's Code of Ethics for informatics? (Select all that apply.)

Correct Answer
verified

Exam 26: Privacy and Security

An organization implements a policy on installing software service packs on all its computers. This is an example of which type of control?

Correct AnswerverifiedShow Answer

What is a negative impact of the increased use of mobile devices in transmitting health data?

Correct AnswerverifiedB

Which definition most accurately describes privacy?

Correct AnswerverifiedShow Answer

A healthcare provider forgets to update a patient's medications. Which fair information principle is being violated?

Correct AnswerverifiedShow Answer

Which are examples of secondary use of health information? (Select all that apply.)

Correct AnswerverifiedShow Answer

What are some examples of indirect costs to organizations that have security breaches? (Select all that apply.)

Correct AnswerverifiedA, C, D

What is the difference between the safe harbor and expert determination methods of de-identifying data?

Correct AnswerverifiedShow Answer

Which example constitutes an internal security event?

Correct AnswerverifiedD

Which organization works on an international level to improve information privacy?

Correct AnswerverifiedShow Answer

Which principles are included in IMIA's Code of Ethics for informatics? (Select all that apply.)

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A, C, D

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified