Question 1

What is a negative impact of the increased use of mobile devices in transmitting health data?

Accepted Answer

A)  They support increased health data access for providers. 
B)  They increase the risk of a security breach. 
C)  They decrease productivity. 
D)  They increase the number of medication errors. 
A)  They support increased health data access for providers. 
B)  They increase the risk of a security breach. 
C)  They decrease productivity. 
D)  They increase the number of medication errors. B

Question 2

What are some examples of indirect costs to organizations that have security breaches? (Select all that apply.)

Accepted Answer

A)  Lost productivity 
B)  Expensive fines 
C)  Damaged public trust 
D)  Remediation costs 
E)  Repeating medical procedures 
A)  Lost productivity 
B)  Expensive fines 
C)  Damaged public trust 
D)  Remediation costs 
E)  Repeating medical procedures A, C, D

Question 3

Which example constitutes an internal security event?

Accepted Answer

A)  Servers containing clinical data were stolen from a facility. 
B)  A person hacks into a facility's server and steals PHI electronically. 
C)  A person installs a malicious code past a facility's firewall. 
D)  A system administrator installed a new server without any security measures. 
A)  Servers containing clinical data were stolen from a facility. 
B)  A person hacks into a facility's server and steals PHI electronically. 
C)  A person installs a malicious code past a facility's firewall. 
D)  A system administrator installed a new server without any security measures. D

Question 4

What is the difference between the safe harbor and expert determination methods of de-identifying data?

Accepted Answer

A)  The safe harbor method involves removal of 18 types of identifiers, and the expert determination method involves the application of statistical or scientific models. 
B)  The safe harbor method involves the application of statistical or scientific models, and the expert determination method involves removal of 18 types of identifiers. 
C)  The safe harbor method involves removal of all identifiers, and the expert determination method involves the removal of 18 types of identifiers. 
D)  The safe harbor method involves securing identifiers in an encrypted database, and the expert determination specifically determines the riskiest identifiers to remove. 
A)  The safe harbor method involves removal of 18 types of identifiers, and the expert determination method involves the application of statistical or scientific models. 
B)  The safe harbor method involves the application of statistical or scientific models, and the expert determination method involves removal of 18 types of identifiers. 
C)  The safe harbor method involves removal of all identifiers, and the expert determination method involves the removal of 18 types of identifiers. 
D)  The safe harbor method involves securing identifiers in an encrypted database, and the expert determination specifically determines the riskiest identifiers to remove.

Question 5

Which principles are included in IMIA's Code of Ethics for informatics? (Select all that apply.)

Accepted Answer

A)  Information-Privacy and Disposition 
B)  Openness 
C)  Elimination of Threats 
D)  Legitimate Infringement 
E)  Accountability 
A)  Information-Privacy and Disposition 
B)  Openness 
C)  Elimination of Threats 
D)  Legitimate Infringement 
E)  Accountability

Question 6

An organization implements a policy on installing software service packs on all its computers. This is an example of which type of control?

Accepted Answer

A)  Administrative 
B)  Technical 
C)  Physical 
D)  Electronic 
A)  Administrative 
B)  Technical 
C)  Physical 
D)  Electronic

Question 7

Which organization works on an international level to improve information privacy?

Accepted Answer

A)  Health and Human Services Office of Civil Rights 
B)  Health Information Security and Privacy Collaboration (HISP
C)  
C)  Department of Health and Human Services (DHHS) 
D)  Electronic Frontier Foundation (EFF) 
A)  Health and Human Services Office of Civil Rights 
B)  Health Information Security and Privacy Collaboration (HISP
C)  
C)  Department of Health and Human Services (DHHS) 
D)  Electronic Frontier Foundation (EFF)

Question 8

A healthcare provider forgets to update a patient's medications. Which fair information principle is being violated?

Accepted Answer

A)  Correction 
B)  Openness and transparency 
C)  Data quality and integrity 
D)  Safeguards 
A)  Correction 
B)  Openness and transparency 
C)  Data quality and integrity 
D)  Safeguards

Question 9

Which are examples of secondary use of health information? (Select all that apply.)

Accepted Answer

A)  Treatment 
B)  Surveillance 
C)  Research 
D)  Marketing 
E)  Prevention 
A)  Treatment 
B)  Surveillance 
C)  Research 
D)  Marketing 
E)  Prevention

Question 10

Which definition most accurately describes privacy?

Accepted Answer

A)  The means to ensure health record privacy and confidentiality 
B)  Accuracy and completeness of health information 
C)  The rights of individuals to control access to their person or information about themselves 
D)  An act that has the potential to cause harm to an informational asset 
A)  The means to ensure health record privacy and confidentiality 
B)  Accuracy and completeness of health information 
C)  The rights of individuals to control access to their person or information about themselves 
D)  An act that has the potential to cause harm to an informational asset

Exam 26: Privacy and Security

What is a negative impact of the increased use of mobile devices in transmitting health data?

What are some examples of indirect costs to organizations that have security breaches? (Select all that apply.)

Which example constitutes an internal security event?

What is the difference between the safe harbor and expert determination methods of de-identifying data?

Which principles are included in IMIA's Code of Ethics for informatics? (Select all that apply.)

An organization implements a policy on installing software service packs on all its computers. This is an example of which type of control?

Which organization works on an international level to improve information privacy?

A healthcare provider forgets to update a patient's medications. Which fair information principle is being violated?

Which are examples of secondary use of health information? (Select all that apply.)

Which definition most accurately describes privacy?

An Introduction to Health Informatics

Theoretical Foundations of Health Informatics

Evidence-Based Practice, Practice-Based Evidence, and Informatics

Models, Theories, and Research for Program Evaluation

Technical Infrastructure to Support Healthcare

Electronic Health Records and Applications for Managing Patient Care

Administrative Applications Supporting Healthcare Delivery

Telehealth and Applications for Delivering Care at a Distance

Home Health and Related Community-Based Systems

Clinical Decision Support Systems in Healthcare

Public Health Informatics

The Evolving Epatient

Social Media Tools for Practice and Education

Personal Health Records PHRS

Mhealththe Intersection of Mobile Technology and Health

Identifying and Selecting an Information System Solution

Project Management Principles and Clinical Systems

Contract Negotiations and Software Licensing

Implementing and Upgrading an Information System Solution

Health Information Systems: Downtime and Disaster Recovery

Improving the User Experience for Health Information Technology Products

Informatics-Related Standards and Standards-Setting Organizations

Data Science and Analytics in Healthcare

Patient Safety and Quality Initiatives in Informatics

Legal Issues, Federal Regulations, and Accreditation

The Health Information Technology for Education and Clinical Health Hitech Act, Meaningful Use Mu, and Medicare Access & Chip Reauthorization Act of 2015 Macra

Health Policy and Health Informatics

Health Information Technology Governance

Informatics in the Curriculum for Healthcare Professionals

Distance Education: Applications, Techniques, and Issues

Informatics Tools for Educating Health Professionals

Simulation in Healthcare Education

International Informatics Efforts

The Evolution of Health Informatics

Future Directions and Future Research in Health Informatics

Filters