Ch 12 - Privacy & Security - Hit Computers (Book/✔️understanding ?'s/quiz/quizlet)

Front 1

A computer software program designed to prevent unauthorized use of an information resource

Back 1

Access controls

Front 2

Amended by HITECH, The implementation specifications of the HIPAA security rule that are designated addressable rather than required to be in compliance with the role the covered entity must implement the specification as written implement an alternative or document that the risk for which the addressable implementation specification was provided either does not exist in the organization or exist with a negligible

Back 2

Addressable standards

Front 3

Administrative actions and policies and procedures to manage the selection development implementation and maintenance of security measures to protect electronic protected health information and to manage the conduct of the covered entity's workforce

Back 3

Administrative safeguard

Front 4

As amended by HITECH, Authorizes to adopt standards for transactions and code sets that are used to exchange health data adopt standard identifiers for health plans healthcare providers employers and individuals for use on standard transactions

Back 4

Administration simplification

Front 5

Accredited standards committee electronic data interchange

Back 5

ASC X12 standards

Front 6

The mechanisms that record and examine activity in information systems

Back 6

Audit controls

Front 7

Review the audit trail and compare it to criteria are specified by the organization which illuminates routine injuries such as the periodic back ups

Back 7

Audit reduction tool

Front 8

A chronological set of computerized records that provides evidence of information system activity used to determine security violations a record that shows who has access a computer system

Back 8

Audit trail

Front 9

The physical characteristics of users such as fingerprints voice print retinal scan Iris traits that system store and use to authenticate Identity before allowing the user access to a system

Back 9

Biometrics

Front 10

A person or organization other than a member of a covered entities workforce that performs functions or activities on behalf of or fit in a covered entity that involves the use or disclosure of individually identifiable health information

Back 10

Business associate

Front 11

AHIMA credential that recognizes advanced competency in designing implementing and administering comprehensive privacy and security protection program in all types of healthcare organizations

Back 11

CHPS

Front 12

Certification sponsored by the international information system security certification consider Tory him it is a generic security certification and therefore is not healthcare specific

Back 12

CISSP

Front 13

Under HIPAA means any set of codes used to encoded data elements such as tables of terms medical concepts medical diagnostic codes or medical procedure codes a code set includes the codes in the descriptions of the codes

Back 13

Code set

Front 14

Recovery plan in the event of a power failure disaster or other emergency that limits or eliminate axis to Basilica ease and electronic protected personal health information

Back 14

Contingency Plan

Front 15

A health plan healthcare clearinghouse or a healthcare provider who transmits any health information in electronic form in connection with a transaction covered by the sub-chapter

Back 15

Covered Entity

Front 16

The process of recouping any data that has been lost from the system crashed as well as the data that were obtained during the downtime

Back 16

Data Recovery

Front 17

The process of removing or rearranging the magnetic field of a disc in order to render the data recoverable

Back 17

Degaussing

Front 18

A category of organization established under HIPAA to maintain the electronic transaction standards

Back 18

DSMO

Front 19

To be subject to HIPAA and organization must meet the definition of a

Back 19

Covered Entity

Front 20

One of the purposes of the administrative simplification title is to

Back 20

Improve efficiency and effectiveness of healthcare business processes

Front 21

Is an example of the designated standard maintenance organization

Back 21

HL7

Front 22

What would make patient information PHI

Back 22

Account Number

Front 23

Which encodes data

Back 23

Code Set

Front 24

Allow inequivalent method to be used

Back 24

Addressable Standards

Front 25

A healthcare organization can consider size and complexity of the organization when developing the security plan this flexibility is called

Back 25

Scalability

Front 26

What type of safeguard is more people focused in nature

Back 26

Administrative

Front 27

Ensuring that data are not altered either during transmission across a network or during storage is called

Back 27

Integrity

Front 28

Construction workers accidentally cut the power to the data center this is an example of what type of threat

Back 28

Human Error

Front 29

We found a weakness in our security through which a hacker can't access the system this weakness is known as

Back 29

Vulnerability

Front 30

Security control should be monitored periodically for inappropriate disclosure or use this review is called

Back 30

Information System Activity Review

Front 31

The standard that determines whether or not an employees access to the ePHI Is appropriate is called

Back 31

Workforce Security

Front 32

The individual assigned the responsibility of managing the security process is called

Back 32

Security Official

Front 33

We have spent a lot of money purchasing duplicate hardware cables and such this duplication is known as

Back 33

Redundancy

Front 34

Periodically the files containing the documentation of security awareness training are cleaning out how many years back must records be kept

Back 34

6 years

Front 35

If the EHR crushes what plants should be implemented

Back 35

Contingency

Front 36

Security awareness training must be provided to

Back 36

All members of the workforce

Front 37

Which is a business associate

Back 37

Company that bills for a physicians office

Front 38

An example of a technical safeguard is

Back 38

Audit Control

Front 39

Is used to indicate that data I sent is the same as data received

Back 39

Integrity

Front 40

An example of a person or entity authentication

Back 40

Password

Front 41

Where should the audit trail be stored

Back 41

On a different computer from the database

Front 42

Our computer system just notified us that Mary has just looked up another patient with the same last name this notification is called a

Back 42

Trigger

Front 43

What type of malware can capture keystrokes

Back 43

Spyware

Front 44

The term used to describe viruses and spyware is called

Back 44

Malicious Software

Front 45

An example of two factor authentication

Back 45

Retinal Scan and Password

Front 46

A labor and delivery nurse has the same access to the information system as the perinatal nurse even though the job varies this is what type of access

Back 46

Role-Based

Front 47

Data lost due to Malware being downloaded onto a computer may be caused by which of the following

Back 47

Virus

Front 48

Using a magnet to destroy data on a magnetic disk is called

Back 48

Degaussing

Front 49

An example of a facility access control is

Back 49

Escorting visitors in the data center

Front 50

Where should backup disk be stored?

Back 50

In an area that would not be subjected to the same natural disasters as the original data

Front 51

Physical safeguards include

Back 51

Hardware and Software

Front 52

Poor security practices that do not lead to disclosure of the ePHI are called

Back 52

Security Events

Front 53

It security breach has been reported what concept describes the process used to gather evidence

Back 53

Forensics

Front 54

The inadvertent deletion of data needed for a court case is known as

Back 54

Spoiliation

Front 55

Our hardware repair service needs access to the data center he signed in and is escorted this is an example of what

Back 55

Facility Access Controls

Front 56

An example of a security incident

Back 56

Virus Attack