Your Path to Success: How to Pass the ISC HCISPP HealthCare Information Security and Privacy Practitioner Exam

Public Key Infrastructure (PKI) and digital signatures

Trusted server certificates and passphrases

User ID and password

Asymmetric encryption and User ID

No penalties

HIPPA calls for severe civil and criminal penalties for noncompliance, including: -- fines up to $25k for multiple violations of the same standard in a calendar year -- fines up to $250k and/or imprisonment up to 10 years for knowing misuse of individually identifiable health information.

HIPPA calls for severe civil and criminal penalties for noncompliance, includes: -- fines up to 50k for multiple violations of the same standard in a calendar year -- fines up to $500k and/or imprisonment up to 10 years for knowing misuse of individually identifiable health information

HIPPA calls for severe civil and criminal penalties for noncompliance, including: -- fines up to $100 for multiple violations of the same standard in a calendar year -- fines up to $750k and/or imprisonment up to 20 years for knowing misuse of individually identifiable health information

Required to agree to the requested restriction if the disclosure is for treatment or payment, is not required by law, and if the information is specifically related to a health care item or service that the client has paid for in

full

Required to agree only if the client specifies why he/she wants the restriction

Required to agree only if the client specifies who he/she wants the restriction to apply to

Required to agree to the requested restriction

To identify system threats, vulnerabilities, and acceptable level of risk

To formalize the confirmation of compliance to security policies and standards

To formalize the confirmation of completed risk mitigation and risk analysis

To verify that system architecture and interconnections with other systems are effectively implemented

Aggregate it into one database in the US

Process it in the US, but store the information in France

Share it with a third party

Anonymize it and process it in the US

Medical Staff

Administration

Governing Board

Talking about consumers in public areas or where you can be overheard

Sharing your computer password with a new staff that does not have their own

Including PHI in an unecypted email via a public system

Keeping computer screens out of sight of others

None of the above

Hospitals were unable to pay high enough salaries to physicians.

Physicians disliked salary arrangements.

Licensure laws had not yet been passed.

Physicians who took up practice in a corporate setting were castigated by the medical profession.

Physicians have a higher incentive to sign up only healthy patients.

Physicians have more flexibility to deliver effective and efficient services to patients.

It only pays for an in-person visit with a physician.

A and B only

unvoluntarily protect patient health information before this date

voluntarily protect patient health information before this date

after taking permission, voluntarily protect patient health information before this date

compulsorily protect patient health information before this date