Deck 5: Managing His and Technology Services

Question 1

The business investment decision-making and oversight process by which healthcare organizations effectively evaluate, select, prioritize, and fund HIS is called:

A) IT business governance (ITBG).
B) IT supply-side governance (ITSG).
C) IT demand governance (ITDG).
D) IT process governance (I

Answer 1

C

Question 2

COBIT is a widely adopted IT governance framework that is used by healthcare organizations, and is made up of a library of books that describe an integrated set of seven process-oriented "best practices" for managing IT services.

Answer 2

False

Question 3

The ITIL IT service management (ITSM) best practice process area that a HIS department should consider addressing when deploying or supporting existing HIS applications is:

A) IT service support.
B) IT service desk.
C) IT service continuity.
D) IT service delivery.

Answer 3

A

Question 4

IT service support encompasses the support processes needed to ensure acceptable service, and typically is more process oriented than technical.

Question 5

Which of the following is not part of the ITIL IT service management model?

A) Change Management
B) Problem Management
C) Configuration Management
D) Systems Management

Question 6

A configuration management database (CMDB) is a software database that is used to authorize change requests and coordinate change management board (CMB) activities
(CMB).

Question 7

The ITIL process where recurring incidents are analyzed to determine their root causes and provide permanent solutions for the problem at hand is called:

A) Release management.
B) Incident management.
C) Problem management.
D) Change management.

Question 8

The service desk is a single point of contact for users to report incidents and seek troubleshooting resolution, and often is referred to as the help desk.

Question 9

The ITIL process area that defines the services; describes the roles and responsibilities of those who pay for services; those who use the services; and those who provide the services; and defines the service quality, availability, and timeliness expectations is called:

A) IT service support.
B) IT service delivery.
C) IT service continuity.
D) IT service delivery.

Question 10

Service continuity management is the process by which service level agreements (SLAs) are negotiated with end users and tracked for performance adherence.

Question 11

The ITG framework that describes six guiding principles for the effective, efficient, and acceptable use of IT-responsibility, strategy, acquisition, performance, conformance, and human behavior-is called:

A) NIST 800-55.
B) ISO/IEC 27001.
C) COBIT.
D) ISO/IEC 38500.

Question 12

COBIT is an international ITG reference framework that is useful for HIS governance, oversight, and process audit. It includes requirements for the control and security of sensitive data.

Question 13

An area that have been shown to increase IT operating expenses in healthcare organizations is:

A) Electronic health record (EHR) implementations.
B) Project duration.
C) Both A and b
D) None of the above.

Question 14

A key indicator of effective IT governance is the ratio of unplanned work to planned work.

Question 15

Which of the below is not an area health information systems management needs to address when considering financial and budget risks?

A) Budgeting and planning
B) Clinical models and methods
C) Operating expenses, basic accounting principles, and standards
D) Compliance regulations

Question 16

It is critical that healthcare organizations maintain relationships with as many vendors as possible.

Question 17

Which of the following four steps is not part of the vendor selection process?

A) Formally plan the operating and capital budget amounts.
B) Analyze their business requirements.
C) Conduct a three-layer HIS vendor evaluation search.
D) Select the winning candidate and successfully negotiate a contract.

Question 18

The order of the following four steps correctly identifies how healthcare organizations should proceed in order to select the right vendor: 1) submit a project request; 2) define the requirements; 3) conduct an evaluation; and 4) negotiate the agreement.

Question 19

The request for proposal (RFP) is submitted during which vendor selection process stage?

A) Select the winning candidate and successfully negotiate a contract.
B) Analyze their business requirements.
C) Conduct a three-layer HIS vendor evaluation search.
D) Formally submit a project request.

Question 20

Important vendor-management principles that can help healthcare organizations develop strong vendor relationships are to ensure that the contractual details are equal to the level of project risk, clarify roles and responsibilities, obtain senior management commitment and buy-in, and focus on strategies that will benefit the vendor in lieu of the customer.

Question 21

The contract management benefit which lets an organization see if it is purchasing at the right times, quantities, and prices, and if those purchases are standardized with consistent contract terms and conditions is:

A) Improved compliance management.
B) Expenditure visibility.
C) Enhanced spending and performance analysis.
D) Evergreen contract elimination.

Question 22

When reviewing health information systems contracts, the standard terms and conditions are not commonly revised in order to satisfy the requirements of both parties.

Question 23

The work breakdown structure (WBS) and project schedule is developed during which Project Management Institute (PMI) project management phase?

A) Initiating phase
B) Monitoring and controlling phase
C) Planning phase
D) Scheduling phase

Question 24

The principal objective of project quality management is to ensure that the project satisfies its objectives and requirements.

Question 25

What U.S. regulation requires healthcare and covered entities (CEs) to promptly notify the affected individuals who have had their protected health information (PHI) accessed without proper authorization?

A) HIPAA Privacy Rule
B) Gramm-Leach-Bliley Act
C) Sarbanes-Oxley Act
D) HIPAA Breach Notification Rule

Question 26

The HIPAA Security Rule requires that electronic protected health information (ePHI) be protected by ensuring the confidentiality, integrity, and authorization of that information through safeguards.

Question 27

The job role that includes areas such as cover includes business intelligence, databases, data centers, IT security, servers, networks, systems integration, backup systems, messaging, and websites is:

A) Senior management.
B) Clinical informatics.
C) Information technology (IT).
D) Healthcare IT.

Question 28

Implementation support specialists provide on-site user support for the period of time before and during implementation of health IT systems in clinical and public health settings.

Question 29

Which of the following is not an example of a health information systems (HIS) certification?

A) Information Technology Service Management (ITSM)
B) Certified Professional in Healthcare Information and Management Systems (CPHIMS)
C) Project Management Professional (PMP)
D) Lean Six Sigma

Question 30

An important step to consider when forming an effective HIS steering committee is to focus on HIS resource allocation responsibilities rather than HIS steering objectives.