Health Insurance Portability and Accountability Act (HIPPA) Practice Exam

Match the category of the HIPAA Security standards with their examples: Administrative safeguards.

1. Passwords, security logs, firewalls

2. Policies, procedures, and internal audits

3. Fire-proof records locked

4. Screen savers and locked doors

The correct answer is: Policies, procedures, and internal audits

The category of Administrative safeguards within the HIPAA Security standards primarily refers to the policies, procedures, and processes that are put in place to manage the selection, development, implementation, and maintenance of security measures. These safeguards are critical for ensuring the integrity and confidentiality of electronic protected health information (ePHI). The option that aligns with Administrative safeguards is primarily centered on the creation and enforcement of rules and practices that govern how an organization protects its information assets. This includes establishing policies for data access, handling, and security training for staff — elements that are all essential for compliance with HIPAA requirements. While the other options touch on aspects of security, they do not encompass the broader administrative framework that governs how security measures are developed and implemented. For example, firewalls and security logs are more technical safeguards, while physical protections like fire-proof records or locked doors pertain to physical safeguards. Screen savers contribute to technical safeguards by providing a temporary lockout of systems but do not constitute the administrative planning and policy-making processes that are part of Administrative safeguards.