C810 - Exam Study Set 3 Graded A+(100% Verified)

TRUE - True or false: If a patient requests that his or her name is removed from the hospital directory, the hospital must comply and remove the patient's name. without permission of the patient - PHI can be used and disclosed ___________________ if the PHI is deidentified. Under HIPAA, deidentification refers to health information that has had identifiers removed so there is not the capability to reasonably identify the individual to which the information belongs. Documentation to release records: Verification: Identification of attorney. - If an attorney comes in to request medical records for a malpractice case that he or she is assigned to, what documentation requirements are necessary to release the records, and what type of verification should be completed prior to releasing the records? Mitigate transfer accept - What are the three basic methods to address risk after a HIPAA risk analysis? HIPAA Security Rule - The ________________ requires an organization to implement a process for regular review of system activity. Implement hardware, software, and such to allow the ability to track and review activity on an information system. Determine which systems produce audit logs - When establishing an audit and monitoring program, the first step is: Data at rest - ________________ is when the data are in storage within a database or on a server and are no longer being used or access. Data in motion - _________________ are data in the process of being transmitted from one location to another location such as an e-mail.Modified or deleted files - Which of the following is a potential impact of a virus getting onto an end-user device? User authentication - The process of an end user logging into an electronic system using specific credentials defined by the organization is called: