One implementation specification of a contingency plan is:

1. A. Risk analysis
2. B. Applications and Data Criticality Analysis
3. C. Risk Management
4. D. Integrity Controls
5. E. Encryption

Correct Answer: B

In addition to code sets, HIPAA transactions also contain:

1. A. Security information such as a fingerprint.
2. B. Privacy information.
3. C. Information on all business associates.
4. D. Information on all health care clearinghouses.
5. E. Identifiers.

Correct Answer: E

A covered entity must adopt policies and procedures governing disclosures of PHI that identify

1. A. The types of financial information to be disclosed.
2. B. The specific individuals or entities to which disclosure would be made.
3. C. The types of persons who would receive PHI.
4. D. The conditions that would not apply to disclosure of PHI
5. E. The criteria for reviewing requests for routine disclosure of PHI.

Correct Answer: C