RHIT prep exam 5

What is the formal process of introducing change, adopting the change, and diffusing it throughout the organization?

When served with a court order directing the release of health records, an individual:

Under HIPAA rules, when an individual asks to see their own health information, a covered entity:

The term used to describe controlling information is _______.

Performance standards are used to:

Under the HIPAA Privacy rule, which of the following statements is true?

In data matching which of the following best describes an overlap?

Which is not an automatic control that helps preserve data confidentiality and integrity in an electronic system?

Which of following is an organization's planned response to protect its information in the case of a natural disaster?

Which of the following is the best definition of system of record (SOR)?

Which of the following is a data collection tool that records the workflow of current processes?

When creating requirements of documentation for the hospital bylaws, which of the following should be evaluated?

The use of the health record by a clinician to facilitate quality patient care is considered:

Governing principal that describes how a dept or an org is supposed to handle/execute a specific situation or

After an outpatient review, individual audit results by coder should become part of the:

A statement or guideline that directs decision making or behavior is called a:

What is the biggest threat to the security of healthcare data?

Position descriptions, policies and procedures, training checklists, and performance standards are all examples of:

Which group focuses on accreditation of rehabilitation programs and services?

Which is a problem-solving technique that focuses on working with individuals to find a mutually acceptable solution?

How long should the MPI be retained?

A healthcare system wants to map ICD-10-CM to ICD-9-CM. Which of the following would be true about this effort?

“custodian of health records” refers to the individual w/in an organization who is responsible for all except?

Which of the following is one of the five best practices for management of financial measures in the CDI program?

Before the actual job analysis process begins, an HIM manager must complete the following:

A special web page that offers secure access to data is a(n):

Which of the following is not a guideline for maintaining integrity of the health record?

To ensure relevancy, an organization's security policies and procedures should be reviewed at least:

Placing locks on computer room doors is considered what type of security control?

Which of the following should be taken into consideration when designing a health record form?

Which of the following would be a discriminating attribute used to disqualify two or more similar records?

Which of the following is the best definition of a data governance framework?

Which of the following provide the objective and scope for the HIPAA Security Rule as a whole?

A healthcare provider organization, when defining its legal health record must:

Which of the following would be the best course of action to take to ensure continuous availability of electronic data?

Which of the following is not an element that makes information “PHI” under the HIPAA Privacy Rule?

The protection measures and tools for safeguarding information and information systems is a definition of:

The HIPAA Privacy Rules:

A secure method of communication between the healthcare provider and the patient is a(n):

Burning, shredding, pulping, and pulverizing are all acceptable methods in which process?

Identify the example that can be used to justify a policy against using the copy and paste function.

describe the basics of best of practice clinical documentation improvement (CDI) programs?

The process of releasing health record documentation originally created by a different provider is called:

If a patient wants to amend his or her health record, the covered entity may require the individual to:

What kind of planning addresses long-term needs and sets comprehensive plans of action?

Clinical documentation policies and procedures should:

Which of the following security controls are built into a computer software program?

For HIPAA implementation specifications that are addressable, which of the following statements is true?

What resource should be consulted in terms of who may authorize access, use, or disclose the health records of minors?

shes completing her required high school community service hours by serving as a volunteer at the local hospital.

Electronic systems used by nurses and physicians to document assessments and findings are called:

Which of the following statements is not true about a business associate agreement?

In a management sense, controlling means:

Within the context of electronic health records, protecting data privacy means defending or safeguarding:

A competent individual has the following rights concerning their healthcare:

Which admin safeguards includes policies/procedures for responding to emergencies/failures in systems that contain e-PHI

Clinical documentation improvement staff work directly w department to obtain data about retrospective physician queries

Which of the following is a software program that tracks every access to data in the computer system?

Managing the adoption and implementation of new processes is called:

Covered entities must do which of the following to comply with HIPAA security provisions?

Quality standards for coding accuracy should be:

Which of the following is considered a two-factor authentication system?

Which of the following are security safeguards that protect equipment, media, and facilities?

Which of the following is a written description of an organization's formal position?

Which of the following is the best example of a data governance business case?

____ is the first step in this managerial function is to preform an elemental scan of internal organization & external?

A coding supervisor who. Makes up the weekly work schedule would engage in what type of planning?

Which of the following is not an identifier under the Privacy Rule?

The function used to provide access controls, authentication, and audit logging in an HIE is:

What document outlines the work to be performed by specific employee or group of employees w the same responsibilities?

Which of the following laws created the HITECH act?

Coding productivity is measured by:

Which of the following statements represents knowledge?

Which of the following would be an indicator of process problems in a health information department?

What is the security mechanism called when the director can log-in and access the HR tracking system?

An audit log is an example of:

Which are policies and procedures required by HIPAA that address the management of computer resources and security?

Under HIPAA, which of the following is not named as a covered entity?

Which of the following is considered a clinical documentation best practice?

Which of the following is an example of data security?

Which of the following would be considered a derivation business rule?

A document that describes the steps involved in performing a specific function is a:

Which of the following items on Abigail's to do list is most likely to require a critical conversation?

Which is an alternate work schedule option that has been made possible by the growth and development of technology?

Which of the following is considered a secondary data source?

To comply with HIPAA regulations, a hospital would make its membership in an HIE known to its patients through which of

Which of the following is not part of data governance?

Which of the following data quality characteristics means all data items are included within the information collected?

A standard of performance or best practice for a particular process or outcome is called a(n):

What does the term access control mean?

An electronic health record risk analysis is useful to:

Which of the following best describes the function of kiosks?

Which statements is true in regard to responding to requests from individuals for access to their PHI?

An audit trail may be used to detect which of the following?

Which of the following technologies would reduce the risk that information is not accessible during a server crash?

What is the primary purpose of structured data entry?

When a meaningful _____ is developed, an organization is more likely to achieve its goals and be profitable.

How do patient care managers use the data documented in the health record?

How do accreditation organizations use the health record?

Incorporating a workflow function in an electronic information system would help support: