True
False

2. Security breaches can cause you to violate the Privacy Rule.

True
False

3. You must be in full compliance with the security rule by April 21 2005.

True
False

4. Protected Health Information is any information that connects or links an individual person to a medical record.

True
False

5. A security audit is conducted by administration and the HIPAA Security Officer to determine if a covered entity is at risk.

True
False

6. Administrative safeguards include all of your facility's rules on workplace security, and who can access ePHI and who cannot.

True
False

7. The purpose of a security contingency plan is to make sure you and your co-workers know what to do if you are understaffed.

True
False

8. Physical safeguards focus on the protection of computer systems and the areas where high tech equipment is located.

True
False

9. Passwords are an example of facility access controls.

True
False

10. Device and media controls are used to protect electronic PHI that is moved or disposed of.

True
False

11. Technical safeguards are used to protect the facility itself.

True
False

12. An integrity control, such as a virus-checking system, is one type of technical safeguard.

True
False

13. E-mail documents that contain ePHI and web browser sessions between patients and physicians can be protected by encryption.

True
False

14. Authentication policies are used to verify those logging on to the system, and whether or not they are who they claim to be.

True
False

15. Monitoring systems can be used to determine if unauthorized persons are trying to access ePHI.

True
False

16. HIPAA Security compliance will require a change in our culture.

True
False

17. E-mail attachments are one way that viruses can infect computer networks.

True
False

18. The most common way for viruses to infect an entire network is via unapproved discs or CDs.

True
False

19. Computer generated faxes are considered to be ePHI.

True
False

20. You should report co-workers who breach security rules.

True
False

Acknowledgment of HIPAA Security Education

I acknowledge that I have received education on MemorialCare's practices and policies related to patient confidentiality. I fully agree to comply with MemorialCare's patient confidentiality policies. I understand that if I have any questions related to patient confidentiality I can ask my supervisor or the MemorialCare Privacy Officer.

Web Site Privacy Policy | Patient Privacy | Terms of Use | Compliant with HON Code | Hospital Accreditation