A Covered Entity Suffers a Ransomware Attack That Affects the Personal

question 15

Multiple Choice

A covered entity suffers a ransomware attack that affects the personal health information (PHI) of more than 500 individuals. According to Federal law under HIPAA, which of the following would the covered entity NOT have to report the breach to?

• A) Department of Health and Human Services
• B) The affected individuals
• C) The local media
• D) Medical providers

---

Definitions:

External Evidence

Information obtained from independent sources outside an entity that can be used to support financial statement assertions.

Economic Performance

This term relates to how effectively an entity is utilizing its resources to generate income and manage its operations and investments.

Intangible Assets

Non-physical assets of value owned by a firm, such as patents, trademarks, goodwill, and copyright.

Goodwill

An intangible asset that arises when a business is acquired for more than the fair value of its identifiable net assets, reflecting aspects like brand reputation, customer relations, and patents.