RHIT prep exam 5

Which of the following are security safeguards that protect equipment, media, and facilities?

Identify the example that can be used to justify a policy against using the copy and paste function.

Clinical documentation policies and procedures should:

A standard of performance or best practice for a particular process or outcome is called a(n):

Clinical documentation improvement staff work directly w department to obtain data about retrospective physician queries

Before the actual job analysis process begins, an HIM manager must complete the following:

A document that describes the steps involved in performing a specific function is a:

shes completing her required high school community service hours by serving as a volunteer at the local hospital.

Burning, shredding, pulping, and pulverizing are all acceptable methods in which process?

The use of the health record by a clinician to facilitate quality patient care is considered:

A statement or guideline that directs decision making or behavior is called a:

Which of the following is considered a secondary data source?

The process of releasing health record documentation originally created by a different provider is called:

Managing the adoption and implementation of new processes is called:

Which of the following would be an indicator of process problems in a health information department?

What is the security mechanism called when the director can log-in and access the HR tracking system?

Which of the following data quality characteristics means all data items are included within the information collected?

Which of the following is a written description of an organization's formal position?

Which of the following items on Abigail's to do list is most likely to require a critical conversation?

Within the context of electronic health records, protecting data privacy means defending or safeguarding:

Which of the following statements represents knowledge?

Which statements is true in regard to responding to requests from individuals for access to their PHI?

Under HIPAA rules, when an individual asks to see their own health information, a covered entity:

A coding supervisor who. Makes up the weekly work schedule would engage in what type of planning?

describe the basics of best of practice clinical documentation improvement (CDI) programs?

Which group focuses on accreditation of rehabilitation programs and services?

What document outlines the work to be performed by specific employee or group of employees w the same responsibilities?

After an outpatient review, individual audit results by coder should become part of the:

Which of following is an organization's planned response to protect its information in the case of a natural disaster?

Which is not an automatic control that helps preserve data confidentiality and integrity in an electronic system?

Which of the following would be a discriminating attribute used to disqualify two or more similar records?

An audit trail may be used to detect which of the following?

Which of the following is considered a two-factor authentication system?

Which of the following technologies would reduce the risk that information is not accessible during a server crash?

Which of the following is a data collection tool that records the workflow of current processes?

____ is the first step in this managerial function is to preform an elemental scan of internal organization & external?

Which of the following is the best definition of system of record (SOR)?

Which of the following statements is not true about a business associate agreement?

Which of the following is not part of data governance?

Which is a problem-solving technique that focuses on working with individuals to find a mutually acceptable solution?

A healthcare provider organization, when defining its legal health record must:

Which of the following is one of the five best practices for management of financial measures in the CDI program?

The term used to describe controlling information is _______.

What is the primary purpose of structured data entry?

Which of the following is the best definition of a data governance framework?

Which of the following security controls are built into a computer software program?

The protection measures and tools for safeguarding information and information systems is a definition of:

What kind of planning addresses long-term needs and sets comprehensive plans of action?

Incorporating a workflow function in an electronic information system would help support:

Which of the following laws created the HITECH act?

The HIPAA Privacy Rules:

The function used to provide access controls, authentication, and audit logging in an HIE is:

Which of the following is a software program that tracks every access to data in the computer system?

In a management sense, controlling means:

What is the formal process of introducing change, adopting the change, and diffusing it throughout the organization?

Position descriptions, policies and procedures, training checklists, and performance standards are all examples of:

When served with a court order directing the release of health records, an individual:

Under the HIPAA Privacy rule, which of the following statements is true?

Which of the following best describes the function of kiosks?

Which are policies and procedures required by HIPAA that address the management of computer resources and security?

Which of the following is an example of data security?

Which of the following is the best example of a data governance business case?

Which of the following is not a guideline for maintaining integrity of the health record?

Which of the following provide the objective and scope for the HIPAA Security Rule as a whole?

An electronic health record risk analysis is useful to:

How do accreditation organizations use the health record?

What resource should be consulted in terms of who may authorize access, use, or disclose the health records of minors?

Which of the following is not an element that makes information “PHI” under the HIPAA Privacy Rule?

To ensure relevancy, an organization's security policies and procedures should be reviewed at least:

Placing locks on computer room doors is considered what type of security control?

Which of the following is considered a clinical documentation best practice?

Which of the following should be taken into consideration when designing a health record form?

Performance standards are used to:

How do patient care managers use the data documented in the health record?

Electronic systems used by nurses and physicians to document assessments and findings are called:

A competent individual has the following rights concerning their healthcare:

To comply with HIPAA regulations, a hospital would make its membership in an HIE known to its patients through which of

In data matching which of the following best describes an overlap?

A secure method of communication between the healthcare provider and the patient is a(n):

When creating requirements of documentation for the hospital bylaws, which of the following should be evaluated?

What is the biggest threat to the security of healthcare data?

Under HIPAA, which of the following is not named as a covered entity?

Which of the following would be considered a derivation business rule?

Coding productivity is measured by:

Which of the following is not an identifier under the Privacy Rule?

Which of the following would be the best course of action to take to ensure continuous availability of electronic data?

A healthcare system wants to map ICD-10-CM to ICD-9-CM. Which of the following would be true about this effort?

Which is an alternate work schedule option that has been made possible by the growth and development of technology?

Which admin safeguards includes policies/procedures for responding to emergencies/failures in systems that contain e-PHI

What does the term access control mean?

An audit log is an example of:

When a meaningful _____ is developed, an organization is more likely to achieve its goals and be profitable.

How long should the MPI be retained?

If a patient wants to amend his or her health record, the covered entity may require the individual to:

A special web page that offers secure access to data is a(n):

Quality standards for coding accuracy should be:

“custodian of health records” refers to the individual w/in an organization who is responsible for all except?

For HIPAA implementation specifications that are addressable, which of the following statements is true?

Governing principal that describes how a dept or an org is supposed to handle/execute a specific situation or

Covered entities must do which of the following to comply with HIPAA security provisions?