Which of the following is a reason for not using e-mail to communicate sensitive patient information?

Which of the following statements is false about a firewall?

The most common place to find a firewall is between __________.

Mitigation is __________.

Under which access security mechanism would an individual be allowed access to ePHI if they have a proper log-in and password, belong to a specified group, and their workstation is located in a specific place within the facility?

Barbara requested a copy of her PHI from her physician office on August 31. It is now October 10 and she has not heard anything from the physician office. Which of the following statements is correct?

The HIPAA security rule applies to which of the following covered entities?

The director of health information services is allowed access to the medical record tracking system when providing the proper log-in and password. Under which access security mechanism is the director allowed access to the system?

Medical information loses PHI status and is no longer protected by the HIPAA privacy rule when it __________.

Which of the following would provide the best support of an organization’s efforts toward compliance with the security rule?