(Answered) IDENTIFYING & SAFEGUARDING PII Test.

IDENTIFYING & SAFEGUARDING PII Test. Which of the following are risk associated with the misuse or improper disclosure of PII? Which of the following establishes national standards for protecting PHI? Which of the following balances the need to keep the public informed while protecting U.S. Government interests? Which of the following establishes rules of conduct and safeguards for PII? Which of the following defines responsibilities for notification, mitigation, and remediation in the event of a breach involving PHI? To meet a new requirement to track employees who complete annual security training, an organization uses their Social Security numbers as record identification. An agency employees is teleworking when the agency e-mail system goes down. She has an argument deadline so sends her colleague an encrypted set of records containing PII from her personal e-mail account. John Doe is starting work today at Agency ABC -a non-covered entity that is a business associate of a covered entity. His manager requires him to take training on how to handle PHI before he can support the covered entity. Lisa Smith receives a request to fax records containing PII to another office in her agency. She marks FOUO but cannot find a PII cover sheet so she tells the office she can't send the fa until later. Your PII is in paper form only. You have an existing system containing PII, but no PIA was ever conducted on it. - You want to purchase a new system for storing your PII Your system for strong PII is a National Security System You are converting PII from paper to electronic records PII may be disclosed for "routine use." DoD organization must report a breach of PHI within 24 hours to US-CERT? - A covered entity may disclose PHI only to the subject of the PHI? An organization may not disclose PII outside the system of records unless the individual has given prior written consent or if the disclosure is in accordance with DoD routine use. If a breach of PHI occurs, the organization has 0 days to notify the subject? Which of the following penalties could potentially apply to an individual who fails to comply with regulations for safeguarding PHI? Which action requires an organization to carry out a Privacy Impact Assessment? - Which of the following is not an example of PII? Which of the following are example of PII? This regulation governs this DoD Privacy Program? This law establishes the public's right to access federal government information? - This guidance identifies federal information security controls. - This law establishes the federal government's legal responsibility for safeguarding PII - The individual to whom the record pertains has submitted a written request for the information in question. Your organization seeks no use to record for a routine use, as defined in the SORN. Your organization is using existing records for a new purpose and has not yet published a SORN. Within what timeframe must DoD organization report PII breaches to the United States Computer Emergency Readiness Team (US-CERT) once discovered? Officials or employees who knowingly disclose PII to someone without a need-to-know may be subject to which of the following? Which of the following is responsible for the most recent PII data breaches? - Which of the following is NOT an example of an administrative safeguard that organizations use to protect PII? Which of the following is an example of a physical safeguard that individuals can use to protect PII?