HIPAA Requires a Covered Entity to Perform a Risk Analysis

question 8

Multiple Choice

HIPAA requires a covered entity to perform a risk analysis and implement standards to protect the institution's health information records.Which is one of those standards?

• A) Definition of security measures that should be implemented and revised.
• B) Documentation of the entity's actions,which are to be maintained for 6 years.
• C) Specification of a step-by-step approach outlined in the HIPAA regulations.
• D) Statutory requirements that health information professionals be credentialed.

---

Definitions:

Drug Formulary Checks

The process of verifying prescribed medications against a list of approved drugs to ensure appropriateness, efficiency, and cost-effectiveness of treatment.

Alphabetic

Pertaining to the arrangement of letters in the standard order of the alphabet.

Callbacks

Requests to return for a further interview, audition, or phone call.

Specified Intervals

Distinct periods or spans of time that are defined or determined for a particular purpose or activity.